CVE-2018-1000053 — LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable

Back Back to CVE browser

HIGH

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable

Published Feb 9, 2018

8.8

HIGH

CVSS 3.0

EPSS 0.59%

Description

LimeSurvey version 3.0.0-beta.3+17110 contains a Cross ite Request Forgery (CSRF) vulnerability in Theme Uninstallation that can result in CSRF causing LimeSurvey admins to delete all their themes, rendering the website unusable. This attack appear to be exploitable via Simple HTML markup can be used to send a GET request to the affected endpoint.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.59% 0.00592

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00592

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.59% (0.00592)	46.38th	v5 (v2026.06.15)
Sep 20, 2026	0.59% (0.00592)	46.97th	v5 (v2026.06.15)
Jul 20, 2024	0.07% (0.00073)	31.96th	v3 (v2023.03.01)
Jun 20, 2024	0.07% (0.00073)	31.60th	v3 (v2023.03.01)
Mar 7, 2023	0.07% (0.00073)	29.58th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.44% (0.00442)	10.76th	v5 (v2026.06.15)
Apr 14, 2021	0.44% (0.00442)	0.00th	v1

Weaknesses (1)

CWE-352

CSRF

References (1)

https://github.com/LimeSurvey/LimeSurvey/commit/1e440208a8d8bfd71ad7802e6369a136e8bba3dd
x_refsource_CONFIRMPatchThird Party Advisory

Link	Providers	Tags
https://github.com/LimeSurvey/LimeSurvey/commit/1e440208a8d8bfd71ad7802e6369a136e8bba3dd		x_refsource_CONFIRMPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 9, 2018

Updated Aug 5, 2024

Reserved Feb 5, 2018

Link CVE-2018-1000053

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-1000053

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-1000053