CVE-2021-24442

CVE-2021-24442: Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

Vendor Wpdevart
Product Poll, Survey, Questionnaire and Voting system
Weakness CWE-89 · SQLi
Published July 12, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks

Key dates

02Disclosure timeline

July 12, 2021 CVE published
August 3, 2024 Record updated