Every CVE Search/ Get API key

CVE-2022-43279

LimeSurvey v5.4.4 was discovered to contain a SQL injection vulnerability via the component ...

7.2 HighFix available

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.92%Unchanged since Nov 16, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
CVE-2022-43279
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89, CWE-94
Updated
2026-11-02
CVE List 7.2

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
CVE-2022-43279
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-94
Updated
2026-11-02
EUVDEUVD-2022-46323 7.2

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
EUVD-2022-46323
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-f594-4w5v-rpf5 7.2

LimeSurvey v5.4.4 was discovered to contain a SQL injection vulnerability via the component ...

LimeSurvey v5.4.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
GHSA-f594-4w5v-rpf5
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89, CWE-94
Updated
2026-11-02
OSV 7.2

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
CVE-2022-43279
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBIT-limesurvey-2022-43279 No score

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php.

Record
BIT-limesurvey-2022-43279
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
limesurvey
Bitnami
 5.4.4 up to 5.4.5
5.4.5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-43279 is a high vulnerability (CVSS 7.2) in Limesurvey, published November 15, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. Fixed in limesurvey 5.4.5.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open