Medium severity6.1NVD Advisory· Published Apr 9, 2026· Updated Apr 16, 2026
CVE-2025-70797
CVE-2025-70797
Description
Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:limesurvey:limesurvey:6.15.20:251021:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:limesurvey:limesurvey:6.15.20:251021:*:*:*:*:*:*
- (no CPE)range: = 6.15.20+251021
Patches
Vulnerability mechanics
References
2- gist.github.com/masquerad3r/772ddbfbd9fd95754f4873bcb202146dnvdExploitThird Party Advisory
- github.com/LimeSurvey/LimeSurvey/pull/4356nvdIssue Tracking
News mentions
0No linked articles in our index yet.