CVE-2026-65930: Limesurvey

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5.

Affected products

• Limesurvey Limesurvey: version 7.0.5 only

Published 2026-08-26. Last modified 2026-08-28.