CVE-2017-1002021
CriticalSummary
Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey_id variable in individual_responses.php before placing it in an SQL query.
Risk Assessment
The lack of sanitization may lead to SQL Injection attacks, posing a threat to the security of data in the application.
Recommendation
It is recommended to update the plugin to the latest version and to add proper sanitization of the survey_id variable in the code.
Other vulnerabilities in WordPress plugin Surveys v1.01.8
See all- CVE-2017-1002022Critical
Vulnerability in WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey variable in questions.php before placing it in an SQL query.
- CVE-2017-1002020Critical
Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the action variable in survey_form.php before placing it inside an SQL query.
Original NVD description (English source)
Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.