rootpwn

high · CVSS v3 6.5 · CVSS v4 7.1

CVE-2026-97685

An authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an author…

Description

An authenticated LimeSurvey Community Edition 7.3.0 user allowed to create surveys can use their own survey as an authorized context while supplying question or answer identifiers belonging to another user's survey. The REST survey-patching endpoint checks the attacker's permission against the survey ID in the request URL, but the vulnerable persistence operations resolve the target object independently by its global qid or aid and never verify that it belongs to that authorized survey.

Scores

Severity
high
CVSS v2
5.5
CVSS v3
6.5
CVSS v4
7.1
EPSS
—

← All CVEs

Related CVEs

high

CVE-2026-96602

CVE-2026-96602 is a high‑severity SQL injection flaw in the customerSignin.php file of Abdurrab5’s online‑makeup‑store. The vulnerability allows remote attackers to inject arbitrary SQL through the username or password fields during login, potentially exposing or altering customer data.

View analysis

high

CVE-2026-101281

OpenDMARC versions up to 1.4.2 contain a flaw in the SPF Macro Handler that allows remote attackers to manipulate authentication, potentially enabling spoofed email delivery. The vulnerability can lead to improper mail-from domain verification. A patch is available to fix the issue.

View analysis

high

CVE-2026-86158

Progress Software Fiddler Everywhere 8.0.2 contains a missing authentication flaw in its local .NET backend (Fiddler.WebUi) that lets a local attacker mint OAuth tokens and read the machine‑in‑the‑middle root certificate via an unauthenticated localhost HTTP and SignalR RPC channel.

View analysis

high

CVE-2026-96326

The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Rich Text Editor Field in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

View analysis