CVE-2017-1002020

2017-09-1413:00:00

larry_cashdollar

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

75.4%

JSON

Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.

CNA Affected

[
  {
    "product": "surveys",
    "vendor": "Binny V A",
    "versions": [
      {
        "lessThan": "1.01.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]