CVE-2025-70797 | THREATINT

Description

Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.

PUBLISHED Reserved 2026-01-09 | Published 2026-04-09 | Updated 2026-04-09 | Assigner mitre

References

gist.github.com/masquerad3r/772ddbfbd9fd95754f4873bcb202146d

github.com/LimeSurvey/LimeSurvey/pull/4356

cve.org (CVE-2025-70797)

nvd.nist.gov (CVE-2025-70797)

Download JSON