LimeSurvey Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for LimeSurvey products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

0

Beyond CISA KEV

1

Sensor Observed

0

Virtual Patch Available

0

LimeSurvey KEVs Added by Year

Loading...

1 LimeSurvey KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2020-11455

LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php.

High Not in CISA 20 Jun 2025

Common Vulnerability Classes (CWE)

  • CWE-22 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology