{"schema_version":1,"title":"LimeSurvey Community Edition vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in LimeSurvey Community Edition: 2 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116645, was published on 11 November 2026. Nothing in the last four weeks, down from 4 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/limesurvey-community-edition","json_url":"https://junglewise.ai/threats/technologies/limesurvey-community-edition.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/limesurvey-community-edition","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":2,"last_30_days":2,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-116645","slug":"cve-2026-116645-limesurvey-community-edition-7-8-0-contains-an-sql-injection","title":"LimeSurvey Community Edition SQL injection in survey import/export","severity":"info","exploited":false,"published_at":"2026-11-11T03:16:48.63+00:00","url":"https://junglewise.ai/threats/cve-2026-116645-limesurvey-community-edition-7-8-0-contains-an-sql-injection"},{"cve":"CVE-2026-115640","slug":"cve-2026-115640-limesurvey-community-edition-7-7-0-contains-a-stored-cross-site","title":"LimeSurvey Community Edition stored XSS in participants database","severity":"info","exploited":false,"published_at":"2026-11-10T05:17:47.3+00:00","url":"https://junglewise.ai/threats/cve-2026-115640-limesurvey-community-edition-7-7-0-contains-a-stored-cross-site"},{"cve":"CVE-2026-102626","epss":0.0027,"slug":"cve-2026-102626-an-authenticated-limesurvey-community-edition-7-4-0-user-with","title":"LimeSurvey Community Edition stored XSS in Date/Time question","severity":"info","exploited":false,"published_at":"2026-10-02T18:16:59.433+00:00","url":"https://junglewise.ai/threats/cve-2026-102626-an-authenticated-limesurvey-community-edition-7-4-0-user-with"},{"cve":"CVE-2026-97685","slug":"cve-2026-97685-an-authenticated-limesurvey-community-edition-7-3-0-user-allowed","title":"LimeSurvey Community Edition authorization bypass in REST survey patching","severity":"info","exploited":false,"published_at":"2026-09-29T03:17:23.233+00:00","url":"https://junglewise.ai/threats/cve-2026-97685-an-authenticated-limesurvey-community-edition-7-3-0-user-allowed"},{"cve":"CVE-2026-92730","epss":0.0039,"slug":"cve-2026-92730-limesurvey-community-edition-7-0-14-contains-a-reflected-cross","title":"LimeSurvey Community Edition reflected XSS in CSV import","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:44.43+00:00","url":"https://junglewise.ai/threats/cve-2026-92730-limesurvey-community-edition-7-0-14-contains-a-reflected-cross"},{"cve":"CVE-2026-91775","epss":0.0038,"slug":"cve-2026-91775-limesurvey-fails-to-safely-encode-attacker-controlled-content","title":"LimeSurvey stored XSS in survey import warnings","severity":"info","exploited":false,"published_at":"2026-09-23T18:17:11.097+00:00","url":"https://junglewise.ai/threats/cve-2026-91775-limesurvey-fails-to-safely-encode-attacker-controlled-content"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":2}],"related":[{"name":"LimeSurvey","slug":"limesurvey","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/limesurvey"}],"technology":{"hub":true,"name":"LimeSurvey Community Edition","slug":"limesurvey-community-edition","vendor":{"hub":true,"name":"LimeSurvey","slug":"limesurvey","url":"https://junglewise.ai/threats/vendors/limesurvey"},"aliases":[],"category":"web","description":"Open-source survey and questionnaire creation application from LimeSurvey.","url":"https://junglewise.ai/threats/technologies/limesurvey-community-edition"},"most_severe":[{"cve":"CVE-2026-92730","epss":0.0039,"slug":"cve-2026-92730-limesurvey-community-edition-7-0-14-contains-a-reflected-cross","title":"LimeSurvey Community Edition reflected XSS in CSV import","severity":"info","exploited":false,"published_at":"2026-09-23T19:19:44.43+00:00","url":"https://junglewise.ai/threats/cve-2026-92730-limesurvey-community-edition-7-0-14-contains-a-reflected-cross"},{"cve":"CVE-2026-91775","epss":0.0038,"slug":"cve-2026-91775-limesurvey-fails-to-safely-encode-attacker-controlled-content","title":"LimeSurvey stored XSS in survey import warnings","severity":"info","exploited":false,"published_at":"2026-09-23T18:17:11.097+00:00","url":"https://junglewise.ai/threats/cve-2026-91775-limesurvey-fails-to-safely-encode-attacker-controlled-content"},{"cve":"CVE-2026-102626","epss":0.0027,"slug":"cve-2026-102626-an-authenticated-limesurvey-community-edition-7-4-0-user-with","title":"LimeSurvey Community Edition stored XSS in Date/Time question","severity":"info","exploited":false,"published_at":"2026-10-02T18:16:59.433+00:00","url":"https://junglewise.ai/threats/cve-2026-102626-an-authenticated-limesurvey-community-edition-7-4-0-user-with"},{"cve":"CVE-2026-116645","slug":"cve-2026-116645-limesurvey-community-edition-7-8-0-contains-an-sql-injection","title":"LimeSurvey Community Edition SQL injection in survey import/export","severity":"info","exploited":false,"published_at":"2026-11-11T03:16:48.63+00:00","url":"https://junglewise.ai/threats/cve-2026-116645-limesurvey-community-edition-7-8-0-contains-an-sql-injection"},{"cve":"CVE-2026-115640","slug":"cve-2026-115640-limesurvey-community-edition-7-7-0-contains-a-stored-cross-site","title":"LimeSurvey Community Edition stored XSS in participants database","severity":"info","exploited":false,"published_at":"2026-11-10T05:17:47.3+00:00","url":"https://junglewise.ai/threats/cve-2026-115640-limesurvey-community-edition-7-7-0-contains-a-stored-cross-site"},{"cve":"CVE-2026-97685","slug":"cve-2026-97685-an-authenticated-limesurvey-community-edition-7-3-0-user-allowed","title":"LimeSurvey Community Edition authorization bypass in REST survey patching","severity":"info","exploited":false,"published_at":"2026-09-29T03:17:23.233+00:00","url":"https://junglewise.ai/threats/cve-2026-97685-an-authenticated-limesurvey-community-edition-7-3-0-user-allowed"}],"generated_at":"2026-11-11T04:07:00.129031+00:00"}