> CVE-2025-56421

« BACK_TO_HOME
PUBLISHED
2026-03-10 18:17
MODIFIED
2026-03-10 18:17
EPSS (Prob. Exploit)
0.53%
Top 54.8%
DATA SOURCES:
NVD 🔗 2026-03-10 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-08

> DESCRIPTION

SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-rccq-2fxq-7x3h HIGH

LimeSurvey is vulnerable to SQL injection

AFFECTED PACKAGES:
COMPOSER / limesurvey/limesurvey
< 6.15.4
Fixed in: 6.15.4

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
550 versions affected
ALIASES:
GHSA-rccq-2fxq-7x3h

> HISTORIQUE DES MODIFICATIONS

Première apparition
10/03/2026 18:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES

http://limesurvey.com
https://github.com/hongancalif/security-advisories/blob/main/CVE-2025-56421.md
« BACK_TO_HOME