What is GHSA-fxx2-xm5f-gmf5?

GHSA-fxx2-xm5f-gmf5 is a security advisory published by GitHub Security Advisories with Medium severity. LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the...

Which CVE IDs does GHSA-fxx2-xm5f-gmf5 cover?

GHSA-fxx2-xm5f-gmf5 covers the following CVE IDs: CVE-2026-18403. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-fxx2-xm5f-gmf5Medium

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the...

Vendor

GitHub Security Advisories

Published

August 14, 2026

Last Modified

August 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-18403 →

📋 Description

LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-18403
https://github.com/LimeSurvey/LimeSurvey/commit/7735ce31cea1cad087b0c8556cb65a1c09e29cbd
https://fluidattacks.com/es/advisories/rihanna
https://github.com/LimeSurvey/LimeSurvey
https://github.com/advisories/GHSA-fxx2-xm5f-gmf5