limesurvey
Security Risk Profile
51
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 88 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 10, 2007 to present
88
Total CVEs
32
Critical+High
0
Exploited
12
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
12
Critical/High
Risk Level
51/100
medium
🆕 2Fresh (<7d)📈 3 in Last 30 Days
Severity Distribution
Critical
11High
21Medium
52Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
35
2
SQL Injection
12
3
CSRF
5
4
Path Traversal
4
5
Malicious File Upload
4
Most Affected Products
1. Limesurvey LimeSurvey172
2. composer/limesurvey/limesurvey3
3. Limesurvey LimeSurvey Community Edition2
4. composer/fooman/tcpdf2
5. composer/la-haute-societe/tcpdf2
Recent Vulnerabilities
See more →CVE-2026-18403
unknown
LimeSurvey Community Edition 7.0.5 - Authenticated SQL injection in CPDB
8/14/2026🔧 No Patch
CVE-2026-63361
unknown
LimeSurvey Community Edition 7.0.5+260623 - Reflected XSS in HTML editor popup
8/14/2026🔧 No Patch
CVE-2026-63107
CVSS 6.3medium
LimeSurvey SSRF via REST API Survey Template Host Header
7/20/2026🔧 No Patch
CVE-2026-50636
CVSS 8.7high
LimeSurvey RemoteControl invite_participants/remind_participants SQL Injection
6/9/2026🔧 No Patch
CVE-2026-50635
CVSS 8.7high
LimeSurvey Password Reset Host Header Injection Discloses Reset Token
6/9/2026🔧 No Patch
CVE-2025-63238
CVSS 6.1medium
4/9/2026
CVE-2025-70797
CVSS 6.1medium
4/9/2026🔧 No Patch
CVE-2025-56421
CVSS 7.5high
3/10/2026
CVE-2025-56422
CVSS 9.8critical
3/10/2026🔧 No Patch
CVE-2020-36993
CVSS 5.4medium
LimeSurvey <= 4.3.10 - 'Survey Menu' Persistent Cross-Site Scripting
1/28/2026
Monitor limesurvey in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.