What is CVE-2021-24442?

CVE-2021-24442 is a vulnerability in Wpdevart Poll, Survey, Questionnaire And Voting System, classified under SQL Injection. Published 2021-07-12.

Is CVE-2021-24442 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Wpdevart Poll, Survey, Questionnaire And Voting System

CVE-2021-24442

The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated…

Vulnerability class: SQL Injection

EPSS: 0.725 (98.8th percentile) — read the EPSS interpretation.

Affected products

Wpdevart Poll, Survey, Questionnaire And Voting System — versions 1.5.3

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

20142995/nuclei-templates

References

wpscan.com/vulnerability/7376666e-9b2a-4239-b11f-8544435b444a (x_refsource_CONFIRM)
www.in-spired.xyz/wpdevart-polls-blind-sql-injection/ (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-24442?: CVE-2021-24442 is a vulnerability in Wpdevart Poll, Survey, Questionnaire And Voting System, classified under SQL Injection. Published 2021-07-12.
Is CVE-2021-24442 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.