PT-2026-144942
CVE-2026-116645
·
Published
2026-11-11
·
Updated
2026-11-11
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
LimeSurvey Community Edition version 7.8.0
Description
An SQL injection issue exists in the survey-archive participant import and SPSS-response export workflow. An authenticated user with global
surveys.create permission can import a specially crafted .lsa archive. If the participant XML within this archive creates an attribute column with a malicious name, LimeSurvey passes this name to the Yii select builder during the response export process of a non-anonymous survey. Because names containing parentheses are processed as SQL expressions rather than quoted identifiers, this allows the execution of arbitrary SQL commands with the privileges of the application database.Recommendations
Update LimeSurvey Community Edition to a version newer than 7.8.0.
Found an issue in the description? Have something to add? Feel free to write us 👾