Lucene search

K

CVE-2024-9462

🗓️ 26 Oct 2024 03:03:15Reported by WordfenceType 
cve
 cve
🔗 web.nvd.nist.gov👁 23 Views

The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll settings in all versions up to, and including, 5.4.6 due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level permissions to inject arbitrary web scripts

Show more
Related
Detection
Affected
Refs
[
  {
    "vendor": "ays-pro",
    "product": "Poll Maker – Versus Polls, Anonymous Polls, Image Polls",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "5.4.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
26 Oct 2024 03:15Current
5.3Medium risk
Vulners AI Score5.3
CVSS35.5
EPSS0.001
SSVC
23
.json
Report