Vulnerabilities (CVE)

Filtered by vendor Getperfectsurvey Subscribe
Filtered by product Perfect Survey
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24762 1 Getperfectsurvey 1 Perfect Survey 2022-02-21 7.5 HIGH 9.8 CRITICAL
The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.