[HIGH] LimeSurvey is vulnerable to SQL injection

PKSA-g7yy-kkwv-8pkt CVE-2025-56421 GHSA-rccq-2fxq-7x3h

Affected version: <6.15.4

Reported by:
GitHub

[MEDIUM] LimeSurvey Cross Site Scripting vulnerability

PKSA-6gp7-jzpy-gykg CVE-2024-28709 GHSA-c7xm-rwqj-pgcj

Affected version: <6.5.12

Reported by:
GitHub

[MEDIUM] LimeSurvey Cross Site Scripting vulnerability

PKSA-23w5-jp48-9q58 CVE-2024-28710 GHSA-632q-77qj-c89q

Affected version: <6.5.0

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in LimeSurvey

PKSA-t6yg-bp82-q2d2 CVE-2019-16173 GHSA-r5f2-4wf4-cv66

Affected version: <3.17.14

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in LimeSurvey

PKSA-7z37-866b-yv9v CVE-2019-16172 GHSA-fr47-r224-c36m

Affected version: <3.17.14

Reported by:
GitHub

[MEDIUM] Cross-site Scripting in Limesurvey

PKSA-5xqb-ty9r-czqv CVE-2021-42112 GHSA-h9ph-jcgh-gf69

Affected version: <3.27.19

Reported by:
GitHub