SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.

A SQL Injection vulnerability has been identified in LimeSurvey versions before v.6.15.4+250710. The vulnerability allows remote attackers to obtain sensitive information from the database. This represents a significant security risk as it enables unauthorized access to potentially confidential survey data and user information. Organizations using affected versions of LimeSurvey should upgrade to the patched version immediately to prevent potential data exposure.