EUVD-2022-0900

Malicious code in bioql PyPI...

EUVD-2023-33540

Malicious code in bioql PyPI...

Malicious code in test-mlw2-tiffs-prowl-votes-mazut (npm)

The package test-mlw2-tiffs-prowl-votes-mazut was found to contain malicious code...

Malicious code in @malware-test-votes-patin-occur-sigil/test-mlw3-votes-patin-occur-sigil (npm)

The package @malware-test-votes-patin-occur-sigil/test-mlw3-votes-patin-occur-sigil was found to contain malicious code...

MAL-2025-36453 Malicious code in test-mlw2-tiffs-prowl-votes-mazut (npm)

The package test-mlw2-tiffs-prowl-votes-mazut was found to contain malicious code...

CVE-2024-51917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lequanghuylc Multiple Votes in one page multiple-votes-in-one-page allows Stored XSS.This issue affects Multiple Votes in one page: from n/a through = 1.0.4...

CVE-2023-2010

The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll...

CVE-2023-6109

The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...

CVE-2021-43793

Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse...

CVE-2014-10395

The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list...

CVE-2002-2163

KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "alreadyvoted" cookie by various methods, including a direct call to clearcookies.php...

GHSA-6JRF-4JV4-R9MW tendermint-rs's Light Client Verifier allows malicious validators to spoof votes from other validators

Name: ISA-2025-003: Malicious validator can spoof votes from other validators Component: tendermint-rs Criticality: High Catastrophic Impact; Rare Likelihood per ACMv1.2 Affected versions: = v0.40.2 Affected users: Everyone Description tendermint-rs contains a critical vulnerability in its light...

PT-2025-15899 · Crates.Io · Tendermint-Light-Client-Verifier

Name: ISA-2025-003: Malicious validator can spoof votes from other validators Component: tendermint-rs Criticality: High Catastrophic Impact; Rare Likelihood per ACMv1.2 Affected versions: = v0.40.2 Affected users: Everyone Description tendermint-rs contains a critical vulnerability in its light...

CVE-2024-51917

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lequanghuylc Multiple Votes in one page multiple-votes-in-one-page allows Stored XSS.This issue affects Multiple Votes in one page: from n/a through = 1.0.4...

CVE-2024-51917 WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lequanghuylc Multiple Votes in one page multiple-votes-in-one-page allows Stored XSS.This issue affects Multiple Votes in one page: from n/a through = 1.0.4...

CVE-2024-51917

CVE-2024-51917 is a stored XSS in the WordPress plugin Multiple Votes in one page (versions 1.0.0–1.0.4). The issue arises from Improper Neutralization of Input During Web Page Generation, allowing user-supplied input to be stored and subsequently rendered on pages, enabling stored Cross-Site Scr...

CVE-2024-51917 WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lequanghuylc Multiple Votes in one page multiple-votes-in-one-page allows Stored XSS.This issue affects Multiple Votes in one page: from n/a through = 1.0.4...

WordPress plugin Multiple Votes in one page 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

WordPress Multiple Votes in one page plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Multiple Votes in one page versions = 1.0.4...

WordPress Multiple Votes in one page Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Multiple Votes in one page Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51917 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4983d4506f9d Credits SOPROBRO Required privilege...