What is GHSA-r82m-pqrh-phxp?

GHSA-r82m-pqrh-phxp is a security advisory published by GitHub Security Advisories with High severity. LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting...

Which CVE IDs does GHSA-r82m-pqrh-phxp cover?

GHSA-r82m-pqrh-phxp covers the following CVE IDs: CVE-2026-63361. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-r82m-pqrh-phxpHigh

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting...

Vendor

GitHub Security Advisories

Published

August 14, 2026

Last Modified

August 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-63361 →

📋 Description

LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint. The text and name query parameters are passed through a blacklist sanitizer and then rendered without context-appropriate output encoding.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-63361
https://github.com/LimeSurvey/LimeSurvey/commit/a8993bfd05c4a11255b8400ed9c41a2c22e93aa4
https://fluidattacks.com/es/advisories/mercedes
https://github.com/LimeSurvey/LimeSurvey
https://github.com/advisories/GHSA-r82m-pqrh-phxp