📄 WP-Polls 2.73 Cross Site Scripting

A cross site scripting vulnerability exists in WP-Polls WordPress Plugin version 2.73. This issue is older research added to the archive. WP-Polls 2.73 - Reflected Cross-site Scripting Advisory ID: RO-16-005 CVE ID: CVE-2016-10936 Severity: Medium Vendor: WordPress Product: WP-Polls Version: 2.73...

CVE-2016-10936

The CVE-2016-10936 entry relates to the WordPress WP-Polls plugin. Affected version: WP-Polls before 2.73.1. Root cause: insufficient input validation on the polls-options page, leading to cross-site scripting via the poll_bar_style parameter. Impact: remote attackers with admin access and user i...