How many limesurvey limesurvey/limesurvey CVEs are in CISA KEV?

None of limesurvey limesurvey/limesurvey's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of limesurvey limesurvey/limesurvey are affected?

11 distinct limesurvey limesurvey/limesurvey versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in limesurvey limesurvey/limesurvey CVEs?

limesurvey limesurvey/limesurvey's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-640 (Weak Password Recovery Mechanism for Forgotten Password).

What is the average severity of limesurvey limesurvey/limesurvey CVEs?

The average CVSS base score across limesurvey limesurvey/limesurvey's scored CVEs is 6.5.

limesurvey limesurvey/limesurvey Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: limesurvey limesurvey/limesurvey vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

limesurvey limesurvey/limesurvey Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

limesurvey limesurvey/limesurvey has 8 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

Severity and exploitation

How the CVSS severity of limesurvey limesurvey/limesurvey's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of limesurvey limesurvey/limesurvey's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of limesurvey limesurvey/limesurvey's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every limesurvey limesurvey/limesurvey version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.17.142 CVEs
<= 7.0.0-beta12 CVEs
< 3.27.191 CVE
< 6.15.41 CVE
< 6.5.01 CVE
< 6.5.121 CVE

Fixed in

3.17.142 CVEs
3.27.191 CVE
6.15.41 CVE
6.5.01 CVE
6.5.121 CVE

Find a version

8 CVEs

Sort

LimeSurvey RemoteControl invite_participants/remind_participants SQL Injection
CVE-2026-50636
Patch
CWE-89
High · CVSS 8.7
EPSS 0.6% (47th pct)2026-06-09
LimeSurvey Password Reset Host Header Injection Discloses Reset Token
CVE-2026-50635
Patch
CWE-640
High · CVSS 8.7
EPSS 0.7% (51th pct)2026-06-09
LimeSurvey is vulnerable to SQL injection
CVE-2025-56421
Patch
CWE-89
High · CVSS 7.5
EPSS 0.5% (40th pct)2026-03-10
LimeSurvey Cross Site Scripting vulnerability
CVE-2024-28710
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.6% (46th pct)2024-10-07
LimeSurvey Cross Site Scripting vulnerability
CVE-2024-28709
Patch
CWE-79
Medium · CVSS 5.1
EPSS 0.6% (46th pct)2024-10-07
Cross-site Scripting in Limesurvey
CVE-2021-42112
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.5% (74th pct)2021-10-08
Cross-site Scripting in LimeSurvey
CVE-2019-16172
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 4.6% (92th pct)2019-09-09
Cross-site Scripting in LimeSurvey
CVE-2019-16173
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 3.7% (90th pct)2019-09-09

Common weakness types

The CWE weakness categories most often found in limesurvey limesurvey/limesurvey CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many limesurvey limesurvey/limesurvey CVEs were published each year.

2019

2021

2024

2026

Other limesurvey products

Browse vulnerabilities for other products by limesurvey.

limesurvey97 CVEs

All limesurvey vulnerabilities

Frequently asked questions

Common questions about limesurvey limesurvey/limesurvey vulnerabilities.

How many CVEs does limesurvey limesurvey/limesurvey have?: limesurvey limesurvey/limesurvey has 8 published CVE records since 2019.
How many limesurvey limesurvey/limesurvey CVEs are in CISA KEV?: None of limesurvey limesurvey/limesurvey's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for limesurvey limesurvey/limesurvey vulnerabilities?: Yes — 3 of limesurvey limesurvey/limesurvey's CVEs have a known public exploit.
Which versions of limesurvey limesurvey/limesurvey are affected?: 11 distinct limesurvey limesurvey/limesurvey versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in limesurvey limesurvey/limesurvey CVEs?: limesurvey limesurvey/limesurvey's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-640 (Weak Password Recovery Mechanism for Forgotten Password).
What is the average severity of limesurvey limesurvey/limesurvey CVEs?: The average CVSS base score across limesurvey limesurvey/limesurvey's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track limesurvey limesurvey/limesurvey vulnerabilities

Get an alert for each new limesurvey limesurvey/limesurvey CVE, with AI-written analysis and remediation steps.

Create an account See pricing