CVE-2020-24315

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database...

CVE-2020-24315

CVE-2020-24315 affects the Vinoj Cardoza WordPress Poll Plugin (versions prior to 37). The root cause is missing input escaping on the pollid POST parameter, allowing an attacker to craft SQL statements that can dump the target database. Impact noted across sources as an SQL injection with potent...