1 matches found
CVE-2021-24442: Improper Neutralization of Special Elements used in an SQL Command
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the dateanswers POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks...
9.8CVSS5.8AI score0.45996EPSS
SaveExploits2References2
20