← All credits
Miguel Gómez
11 vulnerability records and advisories credit this contributor.
CVE-2026-19754
Baserow 2.3.3 - SQL injection in formula index() JSONB array extraction
CVE-2026-102626
LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute
CVE-2026-91775
LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings
CVE-2026-97685
LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations
CVE-2026-92730
LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name
CVE-2026-93769
HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
CVE-2026-65931
LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint
CVE-2026-65930
LimeSurvey Community Edition 7.0.5 - Stored XSS in replacement-fields
CVE-2026-63361
LimeSurvey Community Edition 7.0.5 - Reflected XSS in HTML editor popup
CVE-2026-63360
LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint