CVE-2014-4856

Cross-site scripting XSS vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party informati...

CVE-2014-4856

Polldaddy Polls & Ratings WordPress plugin vulnerability CVE-2014-4856 concerns an XSS flaw in versions prior to 2.0.25 triggered via the ratings shortcode and a unique_id parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected product: Polldaddy Polls & Ratings plu...