CyberSec.Space Logo
Back to CVE Browser

CVE-2021-27852

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score46.0340%
EPSS Percentile97.55th
Published2021-05-27
Last Modified2025-10-24
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Checkbox Survey versions prior to 7.

Affected Platforms (CPE)

📦
Checkbox

Survey

< 7.0

References & Advisories

🔗 https://www.kb.cert.org/vuls/id/706695
🔗 https://www.kb.cert.org/vuls/id/706695
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27852

Related Vulnerabilities

CVE-2026-166557.2

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to S...

CVE-2026-56264.3

The Survey Form Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the g...

CVE-2026-148212.7

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templa...

CVE-2026-14820

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditin...