Medium severityNVD Advisory· Published Aug 14, 2026· Updated Aug 14, 2026

CVE-2026-18403

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Limesurvey/Limesurveyllm-fuzzy
Range: <7.0.5

Patches

Vulnerability mechanics

References

fluidattacks.com/es/advisories/rihannanvd
github.com/LimeSurvey/LimeSurvey/commit/7735ce31cea1cad087b0c8556cb65a1c09e29cbdnvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000