CVE-2017-1002022

The CVE-2017-1002022 entry concerns the WordPress Surveys plugin (v1.01.8). A SQL injection flaw exists in questions.php where the survey variable is not sanitized before being placed into an SQL query. This vulnerability can allow arbitrary SQL execution; some sources describe it as authenticate...