https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T11:51:11.191315+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-102626 CVE-2026-102626 — LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute 2026-10-03T11:51:11.192715+00:00

Affected: LimeSurvey

An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted inline JavaScript literal without JavaScript-context encoding.