CVE-2025-68889

CVE-2025-68889 is a reflected XSS in Pinpoll (WordPress plugin) affecting Pinpoll versions up to 4.0.0. The issue is caused by improper input neutralization during web page generation, enabling attacker-controlled input to be reflected in the response. Base metrics indicate CVSS v3.1: 7.1 (HIGH) ...

PT-2026-1927

Name of the Vulnerable Software and Affected Versions Pinpoll versions through 4.0.0 Description The software contains a flaw related to improper input handling during web page creation, specifically a Reflected Cross-site Scripting XSS issue. This allows for the injection of malicious scripts in...

WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Pinpoll versions = 4.0.0...