Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-91775) - Vulnerability Database

LimeSurvey Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scriptin (CVE-2026-91775)

Description

LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface.

References

CVE-2026-91775

Related Vulnerabilities

Moodle Other Vulnerability (CVE-2022-30597) Medium
Common tags: Missing Update Known Vulnerabilities
Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7994) Medium
Common tags: Missing Update Known Vulnerabilities
MongoDb Other Vulnerability (CVE-2020-7928) Medium
Common tags: Missing Update Known Vulnerabilities
MongoDb Other Vulnerability (CVE-2020-7929) Medium
Common tags: Missing Update Known Vulnerabilities
Artifactory CVE-2020-7931 Vulnerability (CVE-2020-7931) High
Common tags: Missing Update Known Vulnerabilities

Severity

Medium

Classification

CVE-2026-91775
CWE-707

Tags

Missing Update
Known Vulnerabilities