Changes from 7.5.1 (build 261007) to 7.6.0 (build 261013) October 13, 2026
+New feature #JD-60: Import complete surveys from the React editor (#5228) (Adil Moumni Abdou)
+New feature #JD-16: File upload question type in statistics (#5295) (Stefan K)
+New feature #JD-104: Responses export modal (#5278) (Razvan Pandor)
+New feature #14429: Survey themes and question themes can now customize the content of the file upload popup (Carsten Schmitz)
-Fixed issue: Username and password fields on the login page were higher than the other input fields (Carsten Schmitz)
-Fixed issue: Survey resources file manager always opened in English regardless of the admin language (Carsten Schmitz)
-Fixed issue: Survey owners could switch off the audit log for their survey (Carsten Schmitz)
-Fixed issue: Survey overview showed PHP warnings when the survey's survey group had been deleted (Carsten Schmitz)
-Fixed issue: Survey mass-action modal too big and had no close button (Carsten Schmitz)
-Fixed issue: Labels with quotes or apostrophes in the mass action menu of lists were shown with HTML entities (e.g. Set "Mandatory" state) (Carsten Schmitz)
-Fixed issue: Input fields and select boxes had different heights and borders in the admin interface and the new editor (Carsten Schmitz)
-Fixed issue: In the survey export dialog no export format was preselected and the chosen format was not highlighted (Carsten Schmitz)
-Fixed issue: In all-in-one surveys, a question could be shown on page load although its condition depended on a hidden later question group (e.g. with default answers or a resumed response) (Carsten Schmitz)
-Fixed issue: Answer option and subquestion tables were cut off early, their header scrolled out of view and the scrollbar covered the delete button (Carsten Schmitz)
-Fixed issue: Adding an answer option or subquestion failed on very long lists (Carsten Schmitz)
-Fixed issue #JD-160: Numerical questions with wrong fallback for missing label in response list page (#5419) (Stefan K)
-Fixed issue #JD-186: "Responses (last 30 days)" bar chart exceeds container (#5410) (Adil Moumni Abdou)
-Fixed issue #JD-171: Alignment issues with multiple short texts question type (#5408) (SaraDimoska)
-Fixed issue #9106: The browser page title did not indicate that a survey page was shown with answer errors (Carsten Schmitz)
-Fixed issue #20759: Scanning for plugin files in the plugin manager failed with a PHP warning in debug mode (Carsten Schmitz)
-Fixed issue #20758: LDAP participant import was offered to every survey administrator although no LDAP query was configured (Carsten Schmitz)
-Fixed issue #20730: Quotas on encrypted questions never triggered (Carsten Schmitz)
-Fixed issue #20723: Deleting a survey left its archived response, timings and participant tables behind (Carsten Schmitz)
-Fixed issue #20666: Fixed ranking condition qid mapping and response (Carsten Schmitz)
-Fixed issue #20622: Mandatory ranking questions can not be answered (Carsten Schmitz)
-Fixed issue #20420: Copy survey fails with error 500 when user lacks permission for the survey's group (#5361) (Carsten Schmitz)
-Fixed issue #20351: Insert image in the quota message editor said "You don't have permissions to browse server", even for superadmins (Carsten Schmitz)
-Fixed issue #19990: An apostrophe inside quoted text in an expression (e.g. 'Crohn's disease') broke all following expressions and could exhaust memory (Carsten Schmitz)
-Fixed issue #19696: Selecting the Raleway, Ubuntu, Source Sans Pro or IBM Plex Serif font in the survey theme options had no effect (Carsten Schmitz)
-Fixed issue #19595: Logging in via LDAP with a different upper/lower case username created a second user on PostgreSQL (Carsten Schmitz)
-Fixed issue #19538: Simple statistics showed no answers for encrypted questions except "No answer" (Carsten Schmitz)
-Fixed issue #19531: Apostrophes in translated placeholders and tooltips were shown as HTML codes (e.g. email field on the save form in Italian) (Carsten Schmitz)
-Fixed issue #19513: RemoteControl JSON-RPC API returned an empty response when the request id was 0 (Carsten Schmitz)
-Fixed issue #19458: Labels in survey presentation settings were sentence fragments ("... progress bar") that were hard to read and translate (Carsten Schmitz)
-Fixed issue #19444: Several elements on the user management page had the same id (Carsten Schmitz)
-Fixed issue #19425: Bulk deleting users who own surveys failed with a misleading "protected user" error (Carsten Schmitz)
-Fixed issue #19279: Adding a new question looked the same as editing one because the question editor had no page heading (Carsten Schmitz)
-Fixed issue #19272: Exporting survey participants filtered by email address exported and deleted nothing when the email address was encrypted (Carsten Schmitz)
-Fixed issue #19249: An image filled in from an answer (e.g. a signature) was missing from the printed answers and their PDF export (Carsten Schmitz)
-Fixed issue #19128: Upgrading from LimeSurvey 3.x got stuck at the database update when the default survey theme was not compatible (Carsten Schmitz)
-Fixed issue #19022: The HTML lang attribute for German (easy) was "de" instead of the standard "de-simple" (Carsten Schmitz)
-Fixed issue #18783: Incorrect warning text (Carsten Schmitz)
-Fixed issue #18781: Importing a survey filled the application log with "Failed to set unsafe attribute" warnings for question types and question groups (Carsten Schmitz)
-Fixed issue #18682: Clicking the paste buttons in the HTML editor seemed to do nothing (Carsten Schmitz)
-Fixed issue #18566: File manager did not work when LimeSurvey was accessed via a host name with a port (Carsten Schmitz)
-Fixed issue #18549: Uploading a video from the HTML5 video dialog of the editor failed with "Incorrect server response" (Carsten Schmitz)
-Fixed issue #18540: Users without permission to create themes were offered "Extend", which then failed with a permission error (Carsten Schmitz)
-Fixed issue #18538: Users without permission to delete themes were offered "Uninstall", which only showed an empty modal (Carsten Schmitz)
-Fixed issue #18513: Users with only import or export permission for central participants could not access the central participant database (Carsten Schmitz)
-Fixed issue #18512: Users without permission to create central participants were offered "Add participant", which only showed "null" (Carsten Schmitz)
-Fixed issue #18511: Deleting their own central participant without global delete permission showed "null" and did nothing (Carsten Schmitz)
-Fixed issue #18493: An expression containing a non-breaking space (as inserted by the HTML editor) showed a syntax error (Carsten Schmitz)
-Fixed issue #18437: Some texts in the Fruity theme options could not be translated (Carsten Schmitz)
-Fixed issue #18408: In Array (numbers) question settings the "Text inputs" option was placed between minimum, step and maximum value (Carsten Schmitz)
-Fixed issue #18392: All pages of a survey had the same browser/page title, so screen reader users could not tell the pages apart (Carsten Schmitz)
-Fixed issue #18367: Pages crashed with an endless loop when a plugin checked permissions while plugins were loading (e.g. in afterPluginLoad) (Carsten Schmitz)
-Fixed issue #18317: Setting an access code length below 5 was silently changed to 15 instead of showing an error (Carsten Schmitz)
-Fixed issue #18285: Filtering by seed in the response list had no effect (Carsten Schmitz)
-Fixed issue #18258: Opening the installer on an installed LimeSurvey showed an error page instead of going to the administration (Carsten Schmitz)
-Fixed issue #18248: Questions without texts in a survey language could not be edited (500 error), and the data consistency check did not fix them (Carsten Schmitz)
-Fixed issue #18049: RemoteControl statistics export left out multiple numerical, multiple short text, array (numbers/text), dual scale and ranking questions (Carsten Schmitz)
-Fixed issue #17990: Deleting a question that was used as target in the panel integration left a broken URL parameter (Carsten Schmitz)
-Fixed issue #17930: A plugin that failed to load before it was installed stayed marked as faulty after it was fixed, and could not be installed (Carsten Schmitz)
-Fixed issue #17659: Deleting a user who owned a survey group left the group with a non-existing owner (Carsten Schmitz)
-Fixed issue #17551: Advanced ranking question showed rank numbers on unranked items (Carsten Schmitz)
-Fixed issue #17550: Input settings of Multiple numerical input questions were listed in an illogical order (Carsten Schmitz)
-Fixed issue #17318: File manager stayed blank when a custom upload directory was set in config.php (Carsten Schmitz)
-Fixed issue #17300: Selected option of button groups was shown by colour only and could not be seen at all in forced colours (high contrast) mode (Carsten Schmitz)
-Fixed issue #17252: Admin list filters, column selection, page size and row links did not work when the application folder was not web-accessible (Carsten Schmitz)
-Fixed issue #17246: Question theme folder did not follow the configured upload directory (Carsten Schmitz)
-Fixed issue #17200: Survey logic file reported no errors although question codes were used more than once (Carsten Schmitz)
-Fixed issue #17199: Importing a question group could create question codes that already existed in the survey (Carsten Schmitz)
-Fixed issue #17053: Survey owner and survey group permissions were not covered by tests (Carsten Schmitz)
-Fixed issue #16996: Range labels on the export responses page could not be translated separately from the email "From:" label (Carsten Schmitz)
-Fixed issue #16919: Survey group owner field was not covered by tests (Carsten Schmitz)
-Fixed issue #16874: Printable survey export (zip) did not use any stylesheets (Carsten Schmitz)
-Fixed issue #16031: Emoticon slider and star rating did not show answers chosen by keyboard and had no visible focus (Carsten Schmitz)
-Fixed issue #15870: Empty condition fields did not show that they default to 1 (always shown) (Carsten Schmitz)
-Fixed issue #15847: Image formats added to the allowed theme image formats setting were still rejected on upload (Carsten Schmitz)
-Fixed issue #15734: With "printanswershonorsconditions" set to 0 the print answers page showed no questions at all (Carsten Schmitz)
-Fixed issue #15359: Theme editor preview of the welcome page showed a Previous button (Carsten Schmitz)
-Fixed issue #15035: Survey logic file reported no errors for question codes with invalid characters (Carsten Schmitz)
-Fixed issue #14972: An ampersand in a participant's first or last name was shown as "&" in the participant list and in text emails, and was encoded again with every save (Carsten Schmitz)
-Fixed issue #14479: Central participants could be saved with an invalid email address and errors on saving were not shown (Carsten Schmitz)
-Fixed issue #14402: Welcome message was shown in all-in-one mode even though it was turned off (Carsten Schmitz)
-Fixed issue #13988: Entering an invalid value in one subquestion marked all subquestion fields of the question as invalid (Carsten Schmitz)
#Updated translation: Swahili by c_schmitz
#Updated translation: Punjabi by c_schmitz
#Updated translation: Malay by c_schmitz
#Updated translation: Korean by c_schmitz
#Updated translation: Irish by c_schmitz
#Updated translation: Hebrew by c_schmitz
#Updated translation: German by c_schmitz, Hyperion
#Updated translation: German by c_schmitz
#Updated translation: German (Informal) by c_schmitz
#Updated translation: German (Informal) by Basil, c_schmitz, Hyperion
#Updated translation: French (France) by DenisChenu
#Updated translation: Dutch by Han
#Updated translation: Dutch by BloomingPrime, Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Dutch (Informal) by BloomingPrime, Han
#Updated translation: Czech by jelen1
#Updated translation: Catalan by qualitatuvic

Changes from 7.5.0 (build 261001) to 7.5.1 (build 261007) October 7, 2026
-Fixed issue: Retrying a failed database update to version 7 could fail with an 'Incorrect table name orphaned_orphaned_...' error (Carsten Schmitz)
-Fixed issue: Remove on screen keyboard from presentation settings in new editor (haythem chibani)
-Fixed issue: New editor survey links for the base language always included a language parameter (Carsten Schmitz)
-Fixed issue: Exclusive option position on randomized subquestions ignored keep_codes_order and used question_order for reinsertion (#5393) (Tim Willig)
-Fixed issue: Database update to 7.0 could fail with 'Too many columns' error when a survey response table had orphaned columns (Carsten Schmitz)
-Fixed issue: Data integrity check silently fixed some problems (e.g. missing survey language texts) and then reported that no errors were found (Carsten Schmitz)
-Fixed issue #JD-149: Save timings toggle does not update response timings correctly (#5352) (Adil Moumni Abdou)
-Fixed issue #AT-2264: Incorrect alignment of dropdown items (#5267) (SaraDimoska)
-Fixed issue #20757: Source code editor in the HTML editor showed code without syntax highlighting and in a proportional font (Carsten Schmitz)
-Fixed issue #20756: [security] Reflected cross-site scripting (XSS) vulnerability in the survey preview popup of survey administration. Severity: Medium (CVSS 6.1, AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An unauthenticated attacker who gets a logged-in administrator with survey content read permission to open a crafted link could run arbitrary JavaScript in that administrator's session. Affects versions 6.4.0 to 7.5.0. (Stefan K)
-Fixed issue #20755: [security] Unvalidated field name in statistics summary for file upload questions. A tampered summary[] entry for a file upload question was used as a response table column name without validation and caused an error page. Not exploitable for SQL injection: column names are escaped since #20741, and the query on the removed questions.language column failed before the column was used. (Carsten Schmitz)
-Fixed issue #20754: [security] Reflected cross-site scripting (XSS) vulnerability in the conditions designer. Severity: Medium (CVSS 6.1, AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). An attacker could craft a link that, when opened by an administrator with read access to the referenced survey's conditions, executes arbitrary JavaScript in that administrator's session. Affects versions up to and including 7.4.0. (Carsten Schmitz)
-Fixed issue #20752: Extending the Vanilla theme logged a false 'No "dropdownoptions" nodes were found' error (Carsten Schmitz)
-Fixed issue #20750: [security] Missing authorization vulnerability in several admin pages and AJAX endpoints (participant panel, survey/question/group editing, label sets, global settings, mass actions). Severity: High (CVSS 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). An authenticated administration user with limited or unrelated permissions could read or change participant data, survey content and settings of surveys they have no access to. Affects versions up to and including 7.4.0. (Carsten Schmitz)
-Fixed issue #20750: [security] Missing authorization checks in admin pages and AJAX endpoints (#5394) (Carsten Schmitz)
-Fixed issue #20749: [security] Missing authorization vulnerability in the SPSS export page. Severity: Medium (CVSS 4.3, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). An authenticated administration user without export permission on a survey could open its SPSS export page and see the survey title and languages. Affects versions up to and including 7.4.0. (Carsten Schmitz)
-Fixed issue #20589: Shared links and notification email links to a single response did not open that response in the new responses view (Carsten Schmitz)
-Fixed issue #20447: [security] User can set any existing theme when saving survey (#4779) (Gabriel Jenik)
-Fixed issue #20447: [security] Missing permission enforcement when saving a survey's theme. Severity: Medium (CVSS 4.3, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). An authenticated user with permission to edit their own survey's general settings, but no permission for a specific theme, could still apply that theme to their survey, Affects versions since 2015 (2.0x) through 7.1.2. Fixed in 7.1.3 (Gabriel Jenik)
-Fixed issue #18450: Presentation settings (question count, group info, question number/code, 'No answer') could be ignored after updating from LimeSurvey 3.x (Carsten Schmitz)
-Fixed issue #16937: Prefilling a date question by URL with an invalid date caused a database error (Carsten Schmitz)
-Fixed issue #16696: The 'Set Access-Control-Allow-Origin header' global setting was not explained (Carsten Schmitz)
-Fixed issue #16622: Survey menu entries with an external link did not work (Carsten Schmitz)
-Fixed issue #16482: Opening a survey link with prefilled values created a response before the survey policy was accepted (#5392) (Carsten Schmitz)
-Fixed issue #16342: Exporting a subquestion's statistics to PDF always exported the first subquestion (Carsten Schmitz)
-Fixed issue #16272: The allowedfileuploads setting had no effect but was still offered as a config option (Carsten Schmitz)
-Fixed issue #15485: JSON plugin settings were corrupted or the editor broke on save/reload (Carsten Schmitz)
-Fixed issue #15339: PHP limits that were too low (e.g. max_input_vars) caused data loss with large surveys without any warning (Carsten Schmitz)
-Fixed issue #15157: Question index dropdown could not be scrolled when a survey has many groups (Carsten Schmitz)
-Fixed issue #14434: Twig dump() showed a Twig vendor file location instead of the theme file and line (Carsten Schmitz)
-Fixed issue #13716: Conditions designer showed answer codes instead of answer labels for dual scale array questions (Carsten Schmitz)
#Updated translation: Turkish by kayazeren
#Updated translation: Portuguese (Portugal) by algarvio, ricardo.santos, xastrefernando
#Updated translation: Japanese by d_inoue
#Updated translation: Italian by lfanfoni
#Updated translation: Italian (Informal) by lfanfoni
#Updated translation: Galician by Gronnd, xastrefernando
#Updated translation: Finnish by Jmantysalo
#Updated translation: Catalan by qualitatuvic

Changes from 7.4.0 (build 260928) to 7.5.0 (build 261001) October 1, 2026
+New feature: Automate data fixing in consistency check & add CLI command (#5324) (Carsten Schmitz)
+New feature #JD-150: Timing columns visible when disabled (#5355) (Adil Moumni Abdou)
-Fixed issue: Typos in question type config.xml files (#5344) (Richard Aljaste)
-Fixed issue: Question attributes loaded slowly on network file systems because config.xml was parsed again for every question (Carsten Schmitz)
-Fixed issue: Placeholder field popup group styling is confusing (Carsten Schmitz)
-Fixed issue: Better error reporting at survey archive import (Carsten Schmitz)
-Fixed issue #JD-135: Too many decimals in grid view statistics (#5346) (Stefan K)
-Fixed issue #CT-652: System slowness when saving survey settings (Carsten Schmitz)
-Fixed issue #20748: Survey-specific theme options are not copied when duplicating a survey (Carsten Schmitz)
-Fixed issue #20746: [security] Stored cross-site scripting vulnerability in the Date/Time question date picker. Severity: High (CVSS 8.7,AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N). An attacker with an authenticated account holding only the global "Surveys: create" permission could store JavaScript in a Date/Time question's minimum or maximum date that runs in the browser of any respondent or administrator who views the question. Affects all versions up to 7.4.0. (#5382) (Stefan K)
-Fixed issue #20743: [security] Stored cross-site scripting vulnerability in the survey text HTML filter. Severity: Medium (CVSS 5.4, AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N). An authenticated user holding survey content update permission on a single survey, such as the survey's owner, could bypass the HTML filter and store script that runs in the browser of participants and administrators who open or preview the survey. Affects all versions up to 7.3.0. (#5383) (Carsten Schmitz)
-Fixed issue #20742: [security] Arbitrary file read vulnerability in survey theme options. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). An attacker with an authenticated account holding only the global "Themes: read" permission could read any file readable by the web server process, including other surveys' uploaded response files and system files, by injecting a template expression into a survey theme description. Affects versions 3.19.0 to 7.4.0.(#5381) (Stefan K)
-Fixed issue #20745: [security] Improper authorization vulnerability in survey theme import. Severity: Medium (CVSS 4.3,AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). An attacker with an authenticated account holding only the global "templates" view permission could upload and install a survey theme, writing attacker-controlled files into the web-served theme directory. Affects versions all version up to 7.4.0. (#5381) (Stefan K)
-Fixed issue #20741: [security] SQL injection vulnerability in statistics column browsing. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). An authenticated user holding statistics read permission on a single survey, such as the survey's owner, could read arbitrary database contents. Affects all versions up to 7.3.0.(#5380) (Carsten Schmitz)
-Fixed issue #20744: [security] SQL injection vulnerability in statistics output for multiple-choice questions. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). An authenticated user holding statistics read permission on a single survey, such as the survey's owner, could read arbitrary database contents. Affects all versions up to 7.3.0. (#5380) (Carsten Schmitz)
-Fixed issue #20740: Input on demand theme: lack of information about context change before action (Carsten Schmitz)
-Fixed issue #20739: Copying survey from admin ui doesnt copy the survey url parameters from panel integration (#5377) (haythem chibani)
-Fixed issue #20738: New editor denies access to users whose permissions come from survey group level (#5378) (Stefan K)
-Fixed issue #20735: Incorrect tooltip for question settings when survey is deactivated (#5372) (haythem chibani)
-Fixed issue #20733: Vanilla theme Information and Relationships 1.3.1 rules broken (#5371) (Denis Chenu)
-Fixed issue #20728: Answers show encrypted in response view when going to the next page (#5360) (Carsten Schmitz)
-Fixed issue #20720: Twitter X button is outdated (#5343) (Richard Aljaste)
-Fixed issue #20397: Export has missing answer labels at multilingual surveys (#5282) (Carsten Schmitz)
-Fixed issue #20213: Dual scale array answer options of the first scale have no accessible name (Carsten Schmitz)
-Fixed issue #19883: PHP8.3 + debug - potential home page broken (#4111) (Denis Chenu)
-Fixed issue #19242: Confusing message "This ZIP archive contains no valid resources files." when trying to upload a file without the correct folders (Carsten Schmitz)
-Fixed issue #18844: Uploaded file name is URL-encoded in survey preview (Carsten Schmitz)
-Fixed issue #18829: Orphaned temporary files remain after an unfinished plugin upload (Carsten Schmitz)
-Fixed issue #18828: Temporary files not removed after successful plugin installation (Carsten Schmitz)
-Fixed issue #18777: Chosen editor type not applied to email templates when HTML emails are disabled (Carsten Schmitz)
-Fixed issue #18699: Exporting responses from several surveys in the same request (e.g. via RemoteControl) could miss responses of the later surveys (Carsten Schmitz)
-Fixed issue #18156: Survey menu toggle button not accessible in survey themes (Carsten Schmitz)
-Fixed issue #16908: Importing question with multiple languages can leave garbage in the DB (Carsten Schmitz)
-Fixed issue #15983: Hidden array subquestions still shown when printing answers with "Print answers respects conditions" enabled (Carsten Schmitz)
-Fixed issue #11833: Survey is submitted without clicking submit when jumping to an irrelevant last group via the question index (Carsten Schmitz)
-Fixed issue #11666: Hard to use 'localized' plugins setting option (Carsten Schmitz)
#Updated translation: Slovak by jelen1
#Updated translation: Slovak by c_schmitz, jelen1
#Updated translation: Portuguese (Portugal) by ricardo.santos, xastrefernando
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue
#Updated translation: German by c_schmitz
#Updated translation: German (Informal) by actxcellence, c_schmitz
#Updated translation: Galician by Gronnd
#Updated translation: French (France) by c_schmitz, DenisChenu, fgervais
#Updated translation: Finnish by Jmantysalo
#Updated translation: Czech by c_schmitz, jelen1, slansky
#Updated translation: Czech by c_schmitz, jelen1, VBraun
#Updated translation: Czech (Informal) by jelen1
#Updated translation: Catalan by qualitatuvic

Changes from 7.3.0 (build 260922) to 7.4.0 (build 260928) September 28, 2026
+New feature #JD-106: Add ExpressionScript highlighting and validation in react editor (#5258) (Adil Moumni Abdou)
-Fixed issue: Unecessary JS console noise though debug mode is off (Carsten Schmitz)
-Fixed issue: Tooltip JS error (this._config is null) when switching pages via the side menu (Carsten Schmitz)
-Fixed issue: Sync XHR and quirks mode console warnings when uploading a file in a file upload question (Carsten Schmitz)
-Fixed issue: Survey menu entries list too wide (Carsten Schmitz)
-Fixed issue: Some username special chars were double encoded when adding to user group (Carsten Schmitz)
-Fixed issue: Notifications with redirect are never marked as read, firing again on next display (Carsten Schmitz)
-Fixed issue: LS.gridView is undefined when a grid page is opened via the side menu (Carsten Schmitz)
-Fixed issue: JS error on statistics page because jsPDF ES module was loaded as classic script (Carsten Schmitz)
-Fixed issue: JS error 'activeTabContent has already been declared' when reopening the question list (Carsten Schmitz)
-Fixed issue: Global side panel logs to console though debug mode is off (Carsten Schmitz)
-Fixed issue: File manager styles not loaded when LimeSurvey is installed in a subdirectory (Carsten Schmitz)
-Fixed issue: Duplicated query string in file upload question modal URL (Carsten Schmitz)
-Fixed issue: CKEditor is not defined when an editor page is opened via the side menu (Carsten Schmitz)
-Fixed issue #JD-132: Fix active survey overview modal behavior (#5266) (Adil Moumni Abdou)
-Fixed issue #LB-159: Array question table header shown in addition to mobile labels in mobile view (Carsten Schmitz)
-Fixed issue #20732: [security] Broken access control vulnerability in survey question and answer editing. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). An authenticated user holding only the global permission to create surveys could use a survey of its own to change the question texts of any other user's survey and to delete or take over its answer options, including in active surveys. Affects versions 6.4.0 through 7.3.0. Reported by: Fluid Attacks. (#5364) (Carsten Schmitz)
-Fixed issue #20727: Survey tokens export language filter only has German as a static option. (#5356) (Richard Aljaste)
-Fixed issue #20721: Error 500 on admin notification email or print answers with ranking question (#5349) (Carsten Schmitz)
-Fixed issue #20216: Survey structure and question reordering are not operable by keyboard (Carsten Schmitz)
-Fixed issue #20211: Sortable tables are missing accessible sort indicators (Carsten Schmitz)
-Fixed issue #20205: Two grouped radio fields are missing their relationship description (Carsten Schmitz)
-Fixed issue #19747: Theme configuration hierarchy loading is not correct (#5308) (Carsten Schmitz)
-Fixed issue #19726: Default theme setting in global configuration has misleading label (Carsten Schmitz)
-Fixed issue #19533: Some index URLs are showing error 500 instead of 404 (Carsten Schmitz)
-Fixed issue #19483: Users in survey permissions user select are not sorted alphabetically (Carsten Schmitz)
-Fixed issue #19475: OSM map not shown if under condition on the same page at first (Carsten Schmitz)
-Fixed issue #19413: Ace editor fails to load in debug mode when use_asset_manager is enabled (Carsten Schmitz)
-Fixed issue #19402: Panel integration does not allow variable name with '-' (Carsten Schmitz)
-Fixed issue #19291: Hidden tip is not hidden after validation passes (Carsten Schmitz)
-Fixed issue #19097: Vertical slider handle in the structure gets in the way (Carsten Schmitz)
-Fixed issue #19077: Survey group count and group-assignment filtering for non-superadmins (Carsten Schmitz)
-Fixed issue #18962: Insert video (youtube) breaks when changing editor views (Carsten Schmitz)
-Fixed issue #18930: Alphabetical answer/subquestion order ignores accents, HTML and survey language (Carsten Schmitz)
-Fixed issue #18807: Admin creation email does not support Expression Manager, barebone URL or plugin replacements (#5350) (Carsten Schmitz)
-Fixed issue #18806: After import/copy its better to go to general settings/overview of the new survey (Carsten Schmitz)
-Fixed issue #18700: When importing, translatelinks is used even though the option has not been checked (Carsten Schmitz)
-Fixed issue #18700: Undefined array key when importing a question without the translinkfields option (Carsten Schmitz)
-Fixed issue #18611: Email attachments with missing files are not warned about and removed without notice (Carsten Schmitz)
-Fixed issue #18589: Unable to use getValidScreenFiles event (Carsten Schmitz)
-Fixed issue #18325: Missing translations (Carsten Schmitz)
-Fixed issue #18293: Language specific attribute names are not used in CPDB user list (Carsten Schmitz)
-Fixed issue #18143: Participant uploaded files are included in survey resources export (Carsten Schmitz)
-Fixed issue #18029: Removed html tags in emails (Carsten Schmitz)
-Fixed issue #17365: Problem with emjois in slider with emoji 5 point choise (Carsten Schmitz)
-Fixed issue #17324: file upload button only working with a mouse (Carsten Schmitz)
-Fixed issue #16572: LSActiveRecord::encryptSave() doesn't run validations by default, while the standard 'save' method does (#3596) (Denis Chenu)
-Fixed issue: Social cards layout in sharing overview miss-aligned (#5351) (haythem chibani)
#Updated translation: Turkish by kayazeren
#Updated translation: Slovak by dusanm, jelen1
#Updated translation: Portuguese (Portugal) by ricardo.santos, xastrefernando
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue, nomoto
#Updated translation: German by c_schmitz
#Updated translation: German (Informal) by c_schmitz
#Updated translation: Galician by Gronnd, xastrefernando
#Updated translation: Finnish by Jmantysalo
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Czech by jelen1
#Updated translation: Czech by c_schmitz, jelen1, VBraun
#Updated translation: Czech by c_schmitz, jelen1

Changes from 7.2.0 (build 260921) to 7.3.0 (build 260922) September 22, 2026
+New feature #LX-4: Enhance “Other” field behavior for single- and multiple-choice questions (#4644) (Gabriel Jenik)
+New feature #LE-776: Feature announcement modal v2 (#5152) (haythem chibani)
+New feature #AT-2104: Option to deselect radio buttons by click (#5131) (Tim Willig)
-Fixed issue: Added deselectsinglechoice theme option to validation schema (#5232) (Tim Willig)
-Fixed issue: New theme options for fruity twentythree missing in config table  on fresh install (#5230) (Tim Willig)
-Fixed issue: ComfortUpdate falsely reports writable files as read-only (Carsten Schmitz)
-Fixed issue #LB-158: SurveyDetail API command exhausting memory on large surveys (#5319) (Rami S. Zaki)
-Fixed issue #CT-1768: Increased image quality of branded qr-code (#5048) (Ahmed Abd El-Azeem)
-Fixed issue #AT-2115: Create table when adding first participants from CPDB (#5091) (SaraDimoska)
-Fixed issue #AT-2114: Create new participant table when clicked on participants tab in survey (#5085) (SaraDimoska)
-Fixed issue #AT-2109: Allow checking other option before entering text for multiple choice question type (#5216) (SaraDimoska)
-Fixed issue #AT-1782: Overview modal information design inconsistent (#5078) (SaraDimoska)
-Fixed issue #20690: Condition not properly converted when importing legacy LSS files from version 3 or earlier (Carsten Schmitz)
-Fixed issue #2066: Added Total time attributable to EM and bigger tooltips (#5079) (SaraDimoska)
#Updated translation: Polish by elissa
#Updated translation: Japanese by nomoto
#Updated translation: German by c_schmitz
#Updated translation: German (Informal) by c_schmitz

Changes from 7.1.2 (build 260917) to 7.2.0 (build 260921) September 21, 2026
New feature: Display timings in response table (#5249)
New feature #LX-8: Add Quota Exit field to responses table to record the matched quota (#5317)
Fixed issue #20697: [security] Reflected XSS through unescaped LSS survey-import warnings (#5330)
Fixed issue #20699: [security] Broken access control vulnerability in participant sharing. Severity: High (CVSS 7.1, AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N). An authenticated user holding only participant-panel read permission and a read-only share of a participant could grant itself, or any other account of its choosing, edit rights on that participant, allowing it to modify and redistribute data it had no relationship to. Affects versions 3.17.4 through 7.1.2. Reported by: Ada Logics.
Fixed issue #20706: [security] Broken access control vulnerability in central participant attribute deletion. Severity: High (CVSS 8.1, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H). An authenticated user holding only a read-only share of a single participant, with no participantpanel permission of any kind, could delete any central participant attribute. Affects all versions up to 7.1.2. Fixed in 7.1.3. Reported by: Google / Ada Logics. (#5329)
Fixed issue #20700: [security] Missing permission and POST checks on Expression Manager maintenance actions. Severity: Medium (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). An authenticated user with no permissions over other users' surveys could rewrite or reset the branching/skip logic of every survey in the installation. Affects all versions up to 7.1.2. Reported by: Ada Logics. (#5328)
Fixed issue #20707: [security] No permission control for queXML exports. (#5325)
Fixed issue #19095: [security] Session does not expire on password change (#5326)
Fixed issue #20712:  HTML tags shown in survey page title
Fixed issue #20711: [security] Reflected XSS vulnerability in participant CSV import result. Severity: High (CVSS 8.0, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N). An attacker with no LimeSurvey account could, via social engineering, get a user with tokens:import permission to import a crafted CSV, executing JavaScript in that user's administrative session. Affects versions 5.3.0 through 7.0.14+. Reported by: Fluid Attacks. (#5331)
Fixed issue #20710: Error adding question when using Postgres
Fixed issue #20692: Authwebserver issue with new editor and IIS (#5306)
Fixed issue #20674: Invalid html lang attribute set for some translation languages (#5281)
Fixed issue #JD-120: Pie chart adjustments (#5310)
Fixed issue #AT-2282: Orphaned or duplicate ranking columns in migration (#5311)
Fixed issue: Message type header keeps piling up when sending email batches
Fixed issue: IP anonymization produced invalid output for compressed IPv6 addresses (e.g. ::1)
Updated translation: German by c_schmitz
Updated translation: French (France) by AnneSophieB, arnaud21, arnaudj, Aura97, b00z00, boheean, c_schmitz, DenisChenu, eddylackmann, fgervais, GuillaumeZ6, jayce, mapage, pasglop, Rodrigue_Galani, titoun31, twilllig
Updated translation: Dutch by Han
Updated translation: German (Informal) by c_schmitz, richterd, twilllig
Updated translation: Dutch (Informal) by Han
Updated translation: Japanese by d_inoue, nomoto
Updated translation: Portuguese (Portugal) by xastrefernando
Updated translation: Turkish by kayazeren

Changes from 7.1.1 (build 260914) to 7.1.2 (build 260917) September 17, 2026
-Fixed issue: Widgets not being properly loaded in debug mode (Carsten Schmitz)
-Fixed issue: Curl should be a required PHP library in the installer, not just an optional one (Carsten Schmitz)
-Fixed issue: Add allowed_classes to unserialize() to prevent PHP Object Injection (#5016) (XananasX)
-Fixed issue #TB-74: Critical and advisories in node packages (#5251) (Stefan K)
-Fixed issue #JD-124: Stack bar chart as default for array question types (#5277) (Razvan Pandor)
-Fixed issue #JD-119: Show chart values on top (#5286) (Razvan Pandor)
-Fixed issue #AT-2263: Incorrect alignment of multiple and single choice buttons inside the survey (#5259) (SaraDimoska)
-Fixed issue #20695: SQL injection in auditlog plugin (Carsten Schmitz)
-Fixed issue #20691: New editor does not load in some hosting configurations (Carsten Schmitz)
-Fixed issue #20672: HTTP 400 "The requested hostname is invalid" does not provide any details, even with active debug mode (Carsten Schmitz)
-Fixed issue #20457: tableExists helper function returns outdated result due to cache. (#4771) (Richard Aljaste)
-Fixed issue #20373: Theme descriptions are translated when installed in a different language than English (Carsten Schmitz)
-Fixed issue #20182: No difference between strong and normal text in question text and answers text (Carsten Schmitz)
-Fixed issue #20174: No visual information if  survey is expired (Carsten Schmitz)
-Fixed issue #20076: Error when copying a survey and duplicate permissions exist (Carsten Schmitz)
-Fixed issue #19761: Can't edit a question group if it's title is empty (Carsten Schmitz)
-Fixed issue #19727: Statement regarding CKEditor 4 usage in LimeSurvey (Carsten Schmitz)
-Fixed issue #19660: Unable to set question text/help by RemoteControl set_question_properties (Carsten Schmitz)
-Fixed issue #19649: Lost global theme options in error page (#5309) (Carsten Schmitz)
-Fixed issue #19583: The survey structure sidebar has no indication for the active group (Carsten Schmitz)
-Fixed issue #19578: After upgrade with MSSQL no way to access to plugin configuration (Carsten Schmitz)
-Fixed issue #19529: Adding a question only adds to the default group without interaction (Carsten Schmitz)
-Fixed issue #19403: Maintenance mode screen not translated (Carsten Schmitz)
-Fixed issue #19324: Hidden questions are still shown when printing answers after survey submission (Carsten Schmitz)
-Fixed issue #19016: Unable to create tables in MS SQL Server during install using dblib (Carsten Schmitz)
-Fixed issue #17107: When changing a survey, an already opened preview shows a blank page (#5294) (Carsten Schmitz)

Changes from 7.1.0 (build 260913) to 7.1.1 (build 260914) September 14, 2026
-Fixed issue #LE-776: Design updates for editor version switch modal (#5285) (haythem chibani)
-Fixed issue: When updating the database from CLI the lock file would later block silent db udpates (Carsten Schmitz)
-Fixed issue #17714: Better wording for security feature related to the script field (Carsten Schmitz)
-Fixed issue #17474: Unable to update token value of a response using RemoteControl API (Carsten Schmitz)
-Fixed issue #17116: Weird unformatted warning after sending invitation (Carsten Schmitz)
-Fixed issue #16657: Error message too cryptic if email for newly added admin user fails due to empty admin email (Carsten Schmitz)
-Fixed issue #15061: Complex Postgres password cannot be used during installation (Carsten Schmitz)
#Updated translation: Japanese by nomoto
#Updated translation: German by c_schmitz
#Updated translation: Finnish by Jmantysalo

Changes from 7.0.13 (build 260903) to 7.0.14 (build 260904) September 4, 2026
+New feature AT-2140: Floating menu for all gridviews (Patricia Stell)
-Fixed issue: Check integrity did not work on Postgres (Carsten Schmitz)
-Fixed issue #20666: Fixed ranking condition qid mapping and response (#5273) (Ahmed Abd El-Azeem)
#Updated translation: German by c_schmitz

Changes from 7.0.12 (build 260833) to 7.0.13 (build 260903) September 3, 2026
+New feature: Statistics V2 for the new Question Editor (#5197) (Stefan K)
-Fixed issue #AT-2187: Fixed a display issue with the question delete button while running the editor tutorial. (ramishenouda)
-Fixed issue #20664: Unable to update using Postgres (Carsten Schmitz)
-* Fixed issue: Bulk edit participants not working when in select all mode (#5178) (Stefan K)
-* Fixed issue #AT-1964: PaginationButtons component style update (#5043) (Stefan K)
#Updated translation: Polish by elissa
#Updated translation: Polish (Informal) by elissa
#Updated translation: Japanese by d_inoue, nomoto
#Updated translation: Hungarian by kkd
#Updated translation: Hungarian (Informal) by kkd
#Updated translation: Finnish by Jmantysalo
#Updated translation: Dutch by Han
#Updated translation: Dutch (Informal) by Han
#Updated translation: Catalan by qualitatuvic