CVE-2017-1002022
CriticalSummary
Vulnerability in WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey variable in questions.php before placing it in an SQL query.
Risk Assessment
The lack of sanitization may lead to SQL Injection attacks, jeopardizing the security of the data in the database.
Recommendation
It is recommended to update the plugin to the latest version and to add proper sanitization of variables in the code.
Other vulnerabilities in WordPress plugin Surveys v1.01.8
See all- CVE-2017-1002021Critical
Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey_id variable in individual_responses.php before placing it in an SQL query.
- CVE-2017-1002020Critical
Vulnerability in the WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the action variable in survey_form.php before placing it inside an SQL query.
Original NVD description (English source)
Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.