Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection
52Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 47%
da publicação à arma
Publicada no NVD12 de jul.
VulnCheck+1425d
probabilidade de exploração
47%top 1% das CVEs
exploração observada
simVulnCheck
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks
Produtos afetados
wpdevart · Poll, Survey, Questionnaire and Voting system