CVE-2017-1002022: Surveys Project Surveys

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

Affected products

• Surveys Project Surveys: version 1.01.8 only

Published 2017-09-14. Last modified 2026-06-17.