CVE-2019-25019

CRITICAL 9.8CVE-2019-25019 · Published 14/02/2021 · updated 17/06/2026

In short

CVE-2019-25019 is a CRITICAL (CVSS 9.8) vulnerability affecting limesurvey (limesurvey).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
Fix: update to 3.19.0 or later.

Package	Affected versions	Patched versions
limesurvey limesurvey	`= 4.0.0< 3.19.0`	`3.19.0`

LimeSurvey before 4.0.0-RC4 allows SQL injection via the participant model.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.