title: Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection
description: The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL Injection attacks
problem types: CWE-89 SQL Injection
affected:
{
product: Poll, Survey, Questionnaire and Voting system
vendor: wpdevart
versions:
lessThan: 1.5.3, status: affected, version: 1.5.3, versionType: custom
}