Lucene search
PRIOn knowledge basePRION:CVE-2021-24833HistoryNov 17, 2021 - 11:15 a.m.
Cross site scripting
2021-11-1711:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
25.9%
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of question and answer text parameters in Create Poll module.
Related
wpvulndb
wpvulndb
YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
2021-10-15 00:00:00
cnvd
cnvd
WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability
2021-10-24 00:00:00
cve
cve
CVE-2021-24833
2021-11-17 11:15:08
nvd
nvd
CVE-2021-24833
2021-11-17 11:15:08
cvelist
cvelist