Description (CNA)
WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap cookie parameter. Attackers can craft SQL payloads in the cookie to extract sensitive database information including usernames, passwords, and other confidential data from the WordPress database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Modalsurvey / Survey & Poll | affected 1.5.7.3 |
CWE
CWE-89
References
- https://www.exploit-db.com/exploits/50269
- http://modalsurvey.pantherius.com/
- https://www.vulncheck.com/advisories/wordpress-plugin-survey-poll-sql-injection-via-sss-params
ADP enrichment
No English description supplied.
No references supplied.