CVE-2026-65930

Description

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5.

References

• https://fluidattacks.com/es/advisories/payphone
• https://github.com/LimeSurvey/LimeSurvey