CVE Catalog
CVE-2026-18403
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk0.28%
21th percentile - higher than 21% of all known CVEs
Summary
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.
Risk Assessment
An authenticated attacker could execute unauthorized SQL queries, potentially leading to data confidentiality breaches or database manipulation.
Recommendation
It is recommended to update LimeSurvey to the latest version with security fixes and restrict user privileges.
Original NVD description (English source)
LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.