CVE-2025-68889

CVE-2025-68889 is a reflected XSS in Pinpoll (WordPress plugin) affecting Pinpoll versions up to 4.0.0. The issue is caused by improper input neutralization during web page generation, enabling attacker-controlled input to be reflected in the response. Base metrics indicate CVSS v3.1: 7.1 (HIGH) ...

CVE-2025-68889 WordPress Pinpoll plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects Pinpoll: from n/a through = 4.0.0...