CVE-2021-24762
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.
Affected products
Unknown · Perfect Surveypublic PoCs found — 4
githubgithub.com/c4cnm/Exploit_CVE-2021-24762★ 1githubgithub.com/NT1410/CVE-2021-24762★ 0cve_referencepacketstormsecurity.com/files/166072/WordPress-Perfect-Survey-1.5.1-SQL-Injection.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50766unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →