CVE-2026-15973— LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries
Quick assessment
Affected
LimeSurvey LimeSurvey
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
LimeSurvey 社区版 7.0.5 在“调查菜单项”管理页面中存在一个存储型跨站脚本（Stored XSS）漏洞。拥有全局 权限的认证用户，可以创建包含攻击者可控数据的调查菜单项。该数据被存储在 字段中，随后在未进行上下文适当编码的情况下，被插入到 HTML 属性（带单引号）中。 此问题影响 LimeSurvey 7.0.5 版本。
Possible ATT&CK Techniques 1 AI
T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-15973
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries
Source: CVE Program / CVE List V5
Vulnerability Description
LimeSurvey Community Edition 7.0.5 contains a stored cross-site scripting vulnerability in the Survey Menu Entries administration page. An authenticated user with the global settings:read permission can create a survey menu entry containing attacker-controlled data. The value is stored in the surveymenu_entries.data field and later inserted into a single-quoted HTML title attribute without context-appropriate encoding.
This issue affects LimeSurvey: 7.0.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| LimeSurvey | LimeSurvey | 7.0.5 | - |
|
II. Public POCs for CVE-2026-15973
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15973
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-15973 (1)
-
🔗 LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries | Fluid Attacks Read full article third-party-advisory
Same Patch Batch · LimeSurvey · 2026-08-26 · 4 CVEs total
| CVE-2026-63360 | 7.4 HIGH | LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoin |
| CVE-2026-16809 | 7.2 HIGH | LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering |
| CVE-2026-65930 | 4.8 MEDIUM | LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields |
IV. Related Vulnerabilities
Same product: LimeSurvey
-
CVE-2026-63360
LimeSurvey Community Edition 7.0.5 - Reflected XSS in user a -
CVE-2026-16809
LimeSurvey Community Edition 7.0.5 - Stored XSS in quota mes -
CVE-2026-65930
LimeSurvey Community Edition 7.0.5 - Stored XSS in replaceme -
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 - Authenticated SQL injec -
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML e
Same vendor: LimeSurvey
-
CVE-2026-63360
LimeSurvey Community Edition 7.0.5 - Reflected XSS in user a -
CVE-2026-16809
LimeSurvey Community Edition 7.0.5 - Stored XSS in quota mes -
CVE-2026-65930
LimeSurvey Community Edition 7.0.5 - Stored XSS in replaceme -
CVE-2026-18403
LimeSurvey Community Edition 7.0.5 - Authenticated SQL injec -
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML e
Same weakness: CWE-79
-
CVE-2026-47665
Penpot: Stored XSS via comment content, innerHTML renders un -
CVE-2026-47666
Penpot: Stored XSS via custom font family name injected into -
CVE-2026-63360
LimeSurvey Community Edition 7.0.5 - Reflected XSS in user a -
CVE-2026-45694
LibreNMS: Reflected XSS in the Proxmox app view via unsaniti -
CVE-2026-16809
LimeSurvey Community Edition 7.0.5 - Stored XSS in quota mes
V. Comments for CVE-2026-15973
No comments yet