← All credits
Miguel Gómez
13 vulnerability records and advisories credit this contributor.
CVE-2026-115640
LimeSurvey Community Edition 7.7.0 - Stored XSS in Central Participants blocklist control
CVE-2026-115541
HumHub 1.19.0 - Stored cross-site scripting in friendship confirmation
CVE-2026-19754
Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
CVE-2026-102626
LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute
CVE-2026-91775
LimeSurvey Community Edition 7.0.14 - Reflected XSS through unescaped LSS survey-import warnings
CVE-2026-97685
LimeSurvey Community Edition 7.3.0 - Cross-survey object authorization bypass in REST survey patch operations
CVE-2026-92730
LimeSurvey Community Edition 7.0.14 - Reflected XSS in participant CSV import result via invalid attribute column name
CVE-2026-93769
HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover
CVE-2026-65931
LimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint
CVE-2026-16809
LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering