CVE-2026-65930

LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used by the administrative question editor.This issue affects LimeSurvey: 7.0.5.

  • Published Aug 26, 2026
  • CVSS 4.8 medium
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-65930 at the National Vulnerability Database