4 matches found
Code injection
The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...
4.3CVSS6AI score0.00914EPSS
SaveExploits0References2Affected Software1
CVE-2017-18520
The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...
6.1CVSS0.00914EPSS
SaveExploits0References2
PT-2019-8454
Name of the Vulnerable Software and Affected Versions democracy-poll plugin versions prior to 5.4 Description The issue affects the democracy-poll plugin for WordPress, allowing for cross-site scripting XSS attacks. This is due to a flaw in the update l10n function within the...
6.1CVSS0.00914EPSS
SaveExploits0References4
CVE-2017-18520: Improper Neutralization of Input During Web Page Generation
The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...
6.1CVSS5.7AI score0.00914EPSS
SaveExploits0References2
20