CVE-2017-1002022

PoC —

CVSS 3.0

9.8 critical

EPSS

4%p89

Published

Sep 14, 2017 (Sep 14, 2017)

Modified

Jun 17, 2026

Description

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

Vendors: surveys project
Products: surveys
Ecosystems: WordPress
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news0 stories

No ingested article mentions this CVE yet.