Lucene search
K

7 matches found

Packet Storm
Packet Storm
added 2024/07/08 12:0 a.m.285 views

WordPress Poll 2.3.6 SQL Injection

Exploit Title: WordPress Poll Plugin SQL Injection Date: 2024-07-06 Exploit Author: tmrswrr Category : Webapps Vendor Homepage: https://total-soft.com/wp-poll/ Version 2.3.6 1. Access the Admin Panel: - Navigate to the admin panel of your WordPress site. - Go to TS Poll Create Pool Use Theme and...

7.4AI score
Exploits0
OSV
OSV
added 2021/11/17 11:15 a.m.2 views

CVE-2021-24833

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.4CVSS6AI score0.00231EPSS
Exploits0References3
NVD
NVD
added 2021/11/17 11:15 a.m.8 views

CVE-2021-24834

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

5.4CVSS0.00244EPSS
Exploits0References3
Prion
Prion
added 2021/11/17 11:15 a.m.12 views

Cross site scripting

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is...

4.3CVSS5.5AI score0.00244EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/11/17 10:15 a.m.14 views

CVE-2021-24833 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...

5.7AI score0.00231EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.3 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress YOP Poll Plugin, which stems from a lack of...

5.4CVSS5.6AI score0.00231EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.2 views

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress Plugin YOP Poll, which stems from the...

5.4CVSS5.7AI score0.00244EPSS
Exploits0References5
Rows per page
Query Builder