Lucene search
+L

2 matches found

attackerkb
attackerkb
•added 2021/11/17 11:15 a.m.•12 views

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS6.4AI score0.01532EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•8 views

CVE-2021-24834: Improper Neutralization of Input During Web Page Generation

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS6.3AI score0.01532EPSS
SaveExploits0References2
Rows per page
Query Builder