Security Advisory
CVE-2021-24762
9.8
CRITICAL
Vulnerability Description
The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.
Published Date
February 1, 2022
Official Source
NIST NVD Advisory