← All advisories

High severityNVD Advisory· Published Mar 10, 2026· Updated Mar 10, 2026

CVE-2025-56421

CVE-2025-56421

Description

SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
limesurvey/limesurveyPackagist	< 6.15.4	6.15.4

Affected products

2

Limesurvey/Limesurveycpe-rescue
ghsa-coords
pkg:composer/limesurvey/limesurvey
Range: < 6.15.4

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-rccq-2fxq-7x3hghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-56421ghsaADVISORY
limesurvey.comghsaWEB
github.com/LimeSurvey/LimeSurvey/commit/d6c3c780cdd17d5eef1c8c69ad0105beffa2374fghsaWEB
github.com/LimeSurvey/LimeSurvey/pull/4328ghsaWEB
github.com/hongancalif/security-advisories/blob/main/CVE-2025-56421.mdghsaWEB

News mentions

0

No linked articles in our index yet.