Viewing File: /var/softaculous/lime/changelog.txt

Changes from 7.1.2 (build 260917) to 7.2.0 (build 260921) September 21, 2026
New feature: Display timings in response table (#5249)
New feature #LX-8: Add Quota Exit field to responses table to record the matched quota (#5317)
Fixed issue #20697: [security] Reflected XSS through unescaped LSS survey-import warnings (#5330)
Fixed issue #20699: [security] Broken access control vulnerability in participant sharing. Severity: High (CVSS 7.1, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N). An authenticated user holding only participant-panel read permission and a read-only share of a participant could grant itself, or any other account of its choosing, edit rights on that participant, allowing it to modify and redistribute data it had no relationship to. Affects versions 3.17.4 through 7.1.2. Reported by: Ada Logics.
Fixed issue #20706: [security] Broken access control vulnerability in central participant attribute deletion. Severity: High (CVSS 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). An authenticated user holding only a read-only share of a single participant, with no participantpanel permission of any kind, could delete any central participant attribute. Affects all versions up to 7.1.2. Fixed in 7.1.3. Reported by: Google / Ada Logics. (#5329)
Fixed issue #20700: [security] Missing permission and POST checks on Expression Manager maintenance actions. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). An authenticated user with no permissions over other users' surveys could rewrite or reset the branching/skip logic of every survey in the installation. Affects all versions up to 7.1.2. Reported by: Ada Logics. (#5328)
Fixed issue #20707: [security] No permission control for queXML exports. (#5325)
Fixed issue #19095: [security] Session does not expire on password change (#5326)
Fixed issue #20712:  HTML tags shown in survey page title
Fixed issue #20711: [security] Reflected XSS vulnerability in participant CSV import result. Severity: High (CVSS 8.0, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N). An attacker with no LimeSurvey account could, via social engineering, get a user with tokens:import permission to import a crafted CSV, executing JavaScript in that user's administrative session. Affects versions 5.3.0 through 7.0.14+. Reported by: Fluid Attacks. (#5331)
Fixed issue #20710: Error adding question when using Postgres
Fixed issue #20692: Authwebserver issue with new editor and IIS (#5306)
Fixed issue #20674: Invalid html lang attribute set for some translation languages (#5281)
Fixed issue #JD-120: Pie chart adjustments (#5310)
Fixed issue #AT-2282: Orphaned or duplicate ranking columns in migration (#5311)
Fixed issue: Message type header keeps piling up when sending email batches
Fixed issue: IP anonymization produced invalid output for compressed IPv6 addresses (e.g. ::1)
Updated translation: German by c_schmitz
Updated translation: French (France) by AnneSophieB, arnaud21, arnaudj, Aura97, b00z00, boheean, c_schmitz, DenisChenu, eddylackmann, fgervais, GuillaumeZ6, jayce, mapage, pasglop, Rodrigue_Galani, titoun31, twilllig
Updated translation: Dutch by Han
Updated translation: German (Informal) by c_schmitz, richterd, twilllig
Updated translation: Dutch (Informal) by Han
Updated translation: Japanese by d_inoue, nomoto
Updated translation: Portuguese (Portugal) by xastrefernando
Updated translation: Turkish by kayazeren

Changes from 7.1.1 (build 260914) to 7.1.2 (build 260917) September 17, 2026
-Fixed issue: Widgets not being properly loaded in debug mode (Carsten Schmitz)
-Fixed issue: Curl should be a required PHP library in the installer, not just an optional one (Carsten Schmitz)
-Fixed issue: Add allowed_classes to unserialize() to prevent PHP Object Injection (#5016) (XananasX)
-Fixed issue #TB-74: Critical and advisories in node packages (#5251) (Stefan K)
-Fixed issue #JD-124: Stack bar chart as default for array question types (#5277) (Razvan Pandor)
-Fixed issue #JD-119: Show chart values on top (#5286) (Razvan Pandor)
-Fixed issue #AT-2263: Incorrect alignment of multiple and single choice buttons inside the survey (#5259) (SaraDimoska)
-Fixed issue #20695: SQL injection in auditlog plugin (Carsten Schmitz)
-Fixed issue #20691: New editor does not load in some hosting configurations (Carsten Schmitz)
-Fixed issue #20672: HTTP 400 "The requested hostname is invalid" does not provide any details, even with active debug mode (Carsten Schmitz)
-Fixed issue #20457: tableExists helper function returns outdated result due to cache. (#4771) (Richard Aljaste)
-Fixed issue #20373: Theme descriptions are translated when installed in a different language than English (Carsten Schmitz)
-Fixed issue #20182: No difference between strong and normal text in question text and answers text (Carsten Schmitz)
-Fixed issue #20174: No visual information if  survey is expired (Carsten Schmitz)
-Fixed issue #20076: Error when copying a survey and duplicate permissions exist (Carsten Schmitz)
-Fixed issue #19761: Can't edit a question group if it's title is empty (Carsten Schmitz)
-Fixed issue #19727: Statement regarding CKEditor 4 usage in LimeSurvey (Carsten Schmitz)
-Fixed issue #19660: Unable to set question text/help by RemoteControl set_question_properties (Carsten Schmitz)
-Fixed issue #19649: Lost global theme options in error page (#5309) (Carsten Schmitz)
-Fixed issue #19583: The survey structure sidebar has no indication for the active group (Carsten Schmitz)
-Fixed issue #19578: After upgrade with MSSQL no way to access to plugin configuration (Carsten Schmitz)
-Fixed issue #19529: Adding a question only adds to the default group without interaction (Carsten Schmitz)
-Fixed issue #19403: Maintenance mode screen not translated (Carsten Schmitz)
-Fixed issue #19324: Hidden questions are still shown when printing answers after survey submission (Carsten Schmitz)
-Fixed issue #19016: Unable to create tables in MS SQL Server during install using dblib (Carsten Schmitz)
-Fixed issue #17107: When changing a survey, an already opened preview shows a blank page (#5294) (Carsten Schmitz)

Changes from 7.1.0 (build 260913) to 7.1.1 (build 260914) September 14, 2026
-Fixed issue #LE-776: Design updates for editor version switch modal (#5285) (haythem chibani)
-Fixed issue: When updating the database from CLI the lock file would later block silent db udpates (Carsten Schmitz)
-Fixed issue #17714: Better wording for security feature related to the script field (Carsten Schmitz)
-Fixed issue #17474: Unable to update token value of a response using RemoteControl API (Carsten Schmitz)
-Fixed issue #17116: Weird unformatted warning after sending invitation (Carsten Schmitz)
-Fixed issue #16657: Error message too cryptic if email for newly added admin user fails due to empty admin email (Carsten Schmitz)
-Fixed issue #15061: Complex Postgres password cannot be used during installation (Carsten Schmitz)
#Updated translation: Japanese by nomoto
#Updated translation: German by c_schmitz
#Updated translation: Finnish by Jmantysalo

Changes from 7.0.13 (build 260903) to 7.0.14 (build 260904) September 4, 2026
+New feature AT-2140: Floating menu for all gridviews (Patricia Stell)
-Fixed issue: Check integrity did not work on Postgres (Carsten Schmitz)
-Fixed issue #20666: Fixed ranking condition qid mapping and response (#5273) (Ahmed Abd El-Azeem)
#Updated translation: German by c_schmitz

Changes from 7.0.12 (build 260833) to 7.0.13 (build 260903) September 3, 2026
+New feature: Statistics V2 for the new Question Editor (#5197) (Stefan K)
-Fixed issue #AT-2187: Fixed a display issue with the question delete button while running the editor tutorial. (ramishenouda)
-Fixed issue #20664: Unable to update using Postgres (Carsten Schmitz)
-* Fixed issue: Bulk edit participants not working when in select all mode (#5178) (Stefan K)
-* Fixed issue #AT-1964: PaginationButtons component style update (#5043) (Stefan K)
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue, nomoto
#Updated translation: Hungarian by kkd
#Updated translation: Hungarian (Informal) by kkd
#Updated translation: Finnish by Jmantysalo
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Catalan by qualitatuvic