CVE-2017-1002022

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in WordPress plugin Surveys version 1.01.8 is due to the lack of sanitization of the survey variable in questions.php before placing it in an SQL query.

Risk Assessment

The lack of sanitization may lead to SQL Injection attacks, jeopardizing the security of the data in the database.

Recommendation

It is recommended to update the plugin to the latest version and to add proper sanitization of variables in the code.

Original NVD description (English source)

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.