CVE-2017-1002020

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the action variable in survey_form.php before placing it inside an SQL query.

Risk Assessment

The lack of sanitization may lead to SQL Injection attacks, jeopardizing the security of data in the application.

Recommendation

It is recommended to update the plugin to the latest version and add proper sanitization of variables in the code.

Original NVD description (English source)

Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.