CVE-2025-56421

Critical 7.5

SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

Published March 10, 2026.