CVE-2017-1002021

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey_id variable in individual_responses.php before placing it in an SQL query.

Risk Assessment

The lack of sanitization may lead to SQL Injection attacks, posing a threat to the security of data in the application.

Recommendation

It is recommended to update the plugin to the latest version and to add proper sanitization of the survey_id variable in the code.

Original NVD description (English source)

Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.