01 Record

CVE-2026-18403

LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

MediumPUBLISHEDCNA: Fluid Attacks

Base score6.0 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

02 Description

LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB

Published: 2026-08-14 18:33Z2 HR AGO
Last updated: 2026-08-14 19:31Z1 HR AGO
Reserved: 2026-07-30
Assigning CNA: Fluid Attacks
Record state: PUBLISHED
Severity: Medium (CVSS 6.0)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses: CWE-89
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 7a2d800d7ab6682e57c5ea9a6742b755e8158e36d2cdd9840ac4d78b80535d2d

VendorProductVersionsPlatforms

LimeSurveyLimeSurvey7.0.5Windows, MacOS, Linux