{"id":"CVE-2026-102626","published":"2026-10-02T18:16:59.433","lastModified":"2026-10-02T19:16:39.097","description":"An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time question. When another user renders the affected question, LimeSurvey inserts the stored value into a single-quoted inline JavaScript literal without JavaScript-context encoding.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://fluidattacks.com/advisories/golden","tags":[]},{"url":"https://github.com/LimeSurvey/LimeSurvey/","tags":[]},{"url":"https://github.com/LimeSurvey/LimeSurvey/commit/32e54f14f0b4ddc2d8144daaabf7e23c3bbfb8e8","tags":[]}],"exploitRefs":[{"url":"https://github.com/LimeSurvey/LimeSurvey/","tags":[]},{"url":"https://github.com/LimeSurvey/LimeSurvey/commit/32e54f14f0b4ddc2d8144daaabf7e23c3bbfb8e8","tags":[]}],"hasPoc":true,"ai":null}