CVE-2017-1002020

Description

Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable before placing it inside of an SQL query.

Affected products

• Binny V A / surveysunspecified – 1.01.8

References

• MISChttps://wpvulndb.com/vulnerabilities/8833
• MISChttp://www.vapidlabs.com/advisory.php?v=193
• MISChttps://wordpress.org/plugins/surveys/