CVE-2020-24315

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping

published August 26, 2020

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping. This allows users who craft specific SQL statements to dump the entire targets database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02035 · 80.9th percentile
Published
2020-08-26T13:04Z
EPSS history
Timeline
  • 26 AUG 13:04Z
    Vinoj Cardoza WordPress Poll Plugin v36 and lower executes SQL statement passed in via the pollid POST parameter due to a lack of user input escaping
    cvelistv5