CVE-2021-24442

CVE-2021-24442 affects the WordPress Polls Widget plugin (versions before 1.5.3). The vulnerability arises because the date_answers[] POST parameter is not sanitised, escaped, or validated before being used in a SQL statement, enabling unauthenticated SQL injection. Connected sources (NVD/NVD-bas...