A vulnerability was found in LimeSurvey 6.15.20 and classified as problematic. This impacts an unknown function. The manipulation of the argument Box[title]/box[url] results in cross site scripting.
This vulnerability is known as CVE-2025-70797. It is possible to launch the attack remotely. No exploit is available.
