CVE-2011-5304

Multiple cross-site scripting XSS vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via 1 the pollid parameter to customizer.php or 2 the customize parameter to poll.php...

CVE-2011-5304

The CVE-2011-5304 issue involves the WordPress Sodahead Polls plugin before version 2.0.4, where multiple XSS vulnerabilities allow remote injection via poll_id in customizer.php or via customize in poll.php. The root cause is input handling flaws leading to script/HTML injection; impact is typic...