CVE-2021-24833

The CVE-2021-24833 entry concerns the WordPress plugin YOP Poll (versions before 6.3.1). A stored Cross-Site Scripting (XSS) vulnerability exists in the Admin preview module, allowing a user with a role as low as author to execute arbitrary script code in the application context. The root cause i...

CVE-2021-24833 YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to...