CVE-2020-24315

CVE-2020-24315 affects the Vinoj Cardoza WordPress Poll Plugin (versions prior to 37). The root cause is missing input escaping on the pollid POST parameter, allowing an attacker to craft SQL statements that can dump the target database. Impact noted across sources as an SQL injection with potent...