Not rated
CVE-2021-24442 The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the…
Description
The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Poll, Survey, Questionnaire and Voting system 1.5 | earliest → < 1.5.3 | 1.5.3 |