Lucene search
+L

12 matches found

Packet Storm
Packet Storm
•added 2024/07/08 12:00 a.m.•339 views

WordPress Poll 2.3.6 SQL Injection

Exploit Title: WordPress Poll Plugin SQL Injection Date: 2024-07-06 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-poll/ Version 2.3.6 1. Access the Admin Panel: - Navigate to the admin panel of your WordPress site. - Go to TS Poll Create Pool Use Theme and...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/12/14 12:00 a.m.•19 views

YOP Poll Plugin XSS

The vulnerability of the “Create poll” module in the YOP Poll plugin of the WordPress content management system is related to the lack of protection for website structure when processing parameters such as “Vote Button Label”, “Show Results Link”, and “Display Back to vote Link”. Exploiting this...

6.4CVSS5.7AI score0.01532EPSS
SaveExploits0References8Affected Software1
attackerkb
attackerkb
•added 2021/11/17 11:15 a.m.•12 views

CVE-2021-24833

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.4CVSS6.3AI score0.01124EPSS
SaveExploits0References4
NVD
NVD
•added 2021/11/17 11:15 a.m.•42 views

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS0.01532EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/17 11:15 a.m.•12 views

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS6.4AI score0.01532EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/11/17 11:15 a.m.•24 views

CVE-2021-24833

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.4CVSS6AI score0.01124EPSS
SaveExploits0References3
Prion
Prion
•added 2021/11/17 11:15 a.m.•34 views

Cross site scripting

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

4.3CVSS5.5AI score0.01532EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/11/17 10:15 a.m.•60 views

CVE-2021-24833 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.7AI score0.01124EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•4 views

CVE-2021-24833: Improper Neutralization of Input During Web Page Generation

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.4CVSS6.3AI score0.01124EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•8 views

CVE-2021-24834: Improper Neutralization of Input During Web Page Generation

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS6.3AI score0.01532EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•19 views

WordPress cross-site scripting vulnerabilities

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Plugin YOP Poll, which stems from the...

5.4CVSS5.7AI score0.01532EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•27 views

WordPress cross-site scripting vulnerabilities

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...

5.4CVSS5.6AI score0.01124EPSS
SaveExploits0References5
Rows per page
Query Builder