CVE-2019-15640: Limesurvey

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image.

Affected products

• Limesurvey Limesurvey: before 3.17.10 (fixed in 3.17.10)

Published 2019-08-26. Last modified 2026-06-17.