PT-2026-3316

🗓️ 16 Jan 2026 00:00:00Reported by Positive TechnologiesType

Stored cross-site scripting in Opinion Stage Poll, Survey & Quiz Maker Plugin before version 19.6.25 enables unauthenticated script injection.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2019-25297	16 Jan 202620:14	–	attackerkb
Circl	CVE-2019-25297	16 Jan 202623:28	–	circl
CNNVD	WordPress plugin “Poll, Survey & Quiz Maker Plugin” by Opinion Stage has security vulnerabilities.	16 Jan 202600:00	–	cnnvd
CVE	CVE-2019-25297	16 Jan 202620:14	–	cve
Cvelist	CVE-2019-25297 Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 Stored XSS	16 Jan 202620:14	–	cvelist
EUVD	EUVD-2026-2877	16 Jan 202620:14	–	euvd
NVD	CVE-2019-25297	16 Jan 202621:15	–	nvd
RedhatCVE	CVE-2019-25297	17 Jan 202620:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2019-25297	16 Sep 201900:00	–	vulncheck_kev
Vulnrichment	CVE-2019-25297 Poll, Survey & Quiz Maker Plugin by Opinion Stage < 19.6.25 Stored XSS	16 Jan 202620:14	–	vulnrichment

Source	Link
acunetix	www.acunetix.com/vulnerabilities/web/wordpress-plugin-poll-survey-form-quiz-maker-by-opinionstage-cross-site-scripting-19-6-24
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-25297
web	www.web.archive.org/web/20191020011448/https://pluginvulnerabilities.com/2019/09/16/hackers-may-already-be-targeting-this-persistent-xss-vulnerability-in-poll-survey-form-quiz-maker-by-opinionstage
plugins	www.plugins.trac.wordpress.org/changeset/2158590/social-polls-by-opinionstage
wpscan	www.wpscan.com/vulnerability/4ed1edd6-3813-44a3-bee7-f07c1774b679
vulncheck	www.vulncheck.com/advisories/poll-survey-and-quiz-maker-plugin-by-opinion-stage-stored-xss
wordpress	www.wordpress.org/plugins/social-polls-by-opinionstage
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/social-polls-by-opinionstage/poll-survey-quiz-maker-plugin-by-opinion-stage-19625-unauthenticated-stored-cross-site-scripting

16 Jan 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 45.1

EPSS0.00051

SSVC