Vulnerability in N/a

CVE-2025-70797

Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.

EPSS: 0.001 (23.0th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References