PatchTheCVEsurveys vulnerabilities and fixes
Recent CVEs affecting surveys, with upgrade or downgrade steps. 3 tracked.
surveys has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-09-14. Highest priority: CVE-2017-1002022 (score 67/100).
- CVE-2017-1002022 CRITICAL 9.8 DOWNGRADE Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey vari
- CVE-2017-1002021 CRITICAL 9.8 DOWNGRADE Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the
- CVE-2017-1002020 CRITICAL 9.8 DOWNGRADE Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action va
FAQ
How do I fix surveys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is surveys being exploited right now?
None of the tracked surveys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which surveys CVE should I patch first?
CVE-2017-1002022 currently ranks highest (67/100): Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey vari.