GHSA-rccq-2fxq-7x3h
LimeSurvey is vulnerable to SQL injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | limesurvey/limesurvey | < 6.15.4 | 6.15.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2025-56421
- https://github.com/LimeSurvey/LimeSurvey/pull/4328
- https://github.com/LimeSurvey/LimeSurvey/commit/d6c3c780cdd17d5eef1c8c69ad0105beffa2374f
- https://github.com/LimeSurvey/LimeSurvey
- https://github.com/hongancalif/security-advisories/blob/main/CVE-2025-56421.md
- http://limesurvey.com