Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/12 12:00 a.m.•3 views

CVE-2021-24442: Improper Neutralization of Special Elements used in an SQL Command

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the dateanswers POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks...

9.8CVSS5.8AI score0.45996EPSS
SaveExploits2References2
Rows per page
Query Builder