Unscored CVE-2017-1002021 EUVD-2017-1636GHSA-q72m-wx74-836p

Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before pla…

Published Sep 14, 2017 · Updated Aug 5, 2024 · Assigned by larry_cashdollar

Vendor: Binny V A Product: surveys Category: Web / CMS

Description

Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id variable before placing it inside of an SQL query.

Affected products

Vendor	Product	Affected	Fixed
Binny V A	surveys	unspecified – < 1.01.8	1.01.8

References

https://wpvulndb.com/vulnerabilities/8833
http://www.vapidlabs.com/advisory.php?v=193
https://wordpress.org/plugins/surveys/