CVE-2017-1002022

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

Score

CVSS 3.0 9.8 Critical

Status

Modified - larry0@me.com

Published

2017-09-14

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Surveys (Binny V A)
• Surveys (Surveys Project)

References

• http://www.vapidlabs.com/advisory.php?v=193
• https://wordpress.org/plugins/surveys/
• https://wpvulndb.com/vulnerabilities/8833