CVE-2026-115640 | LimeSurvey up to 7.7.0 Import Flow participant_id cross site scripting

A vulnerability marked as problematic has been reported in LimeSurvey up to 7.7.0. The affected element is an unknown function of the component Import Flow. This manipulation of the argument participant_id causes cross site scripting.

The identification of this vulnerability is CVE-2026-115640. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More