2614 matches found
PT-2022-7358
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the psi trigger poll function in the kernel/sched/psi.c module of the Linux kernel's Pressure Stall Information PSI system. It involves the reuse of previously...
PT-2025-8377
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the data-race around ep-rdllist Description A data-race issue exists in the Linux kernel, specifically around ep-rdllist. The ep poll function calls ep events available witho...
Discourse < 2.7.11 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
CVE-2021-43793
Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse...
Discourse 安全漏洞
Discourse is an open source community discussion platform that includes community, email, and chat room features. The platform includes community, email, and chat room features.Discourse has a security vulnerability that stems from a lack of filtering in the Polls feature for single-option voting...
WordPress Survey And Poll SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation.WordPress Survey and Poll is a solution for direct feedback from visitors on the site. WordPress Survey And Poll SQL injection vulnerability can be exploited by attackers to gain access to...
CVE-2021-24833
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24834
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...
CVE-2021-24833
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24834
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...
CVE-2021-24833
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24834
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...
Cross site scripting
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...
Cross site scripting
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24834
The CVE-2021-24834 is for the WordPress YOP Poll plugin (versions before 6.3.1). The vulnerability is a stored Cross-Site Scripting (XSS) in the Create Poll - Options module, caused by insufficient validation of custom label parameters (vote button label, results link label, back to vote caption ...
CVE-2021-24833 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24833
The CVE-2021-24833 entry concerns the WordPress plugin YOP Poll (versions before 6.3.1). A stored Cross-Site Scripting (XSS) vulnerability exists in the Admin preview module, allowing a user with a role as low as author to execute arbitrary script code in the application context. The root cause i...
CVE-2021-24833: Improper Neutralization of Input During Web Page Generation
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...
CVE-2021-24834: Improper Neutralization of Input During Web Page Generation
The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...