CVE-2024-42903 is a Host header injection vulnerability affecting LimeSurvey versions up to 6.6.1+240806. This flaw enables attackers to craft malicious password reset links that redirect victims to attacker-controlled domains, potentially leading to credential theft or other malicious activities. While the CVSS score is 6.5, SOCRadar's Vulnerability Risk Score (SVRS) is 61, indicating a moderate risk that requires monitoring. The presence of "In The Wild" tag suggests active exploitation. Attackers can leverage this vulnerability to perform phishing attacks and compromise user accounts. Organizations using LimeSurvey should promptly investigate and apply necessary patches or mitigations to prevent potential exploitation. This CVE highlights the importance of input validation and secure coding practices to prevent header injection attacks.