3 matches found
CVE-2021-24885
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...
6.1CVSS0.00905EPSS
SaveExploits1References2
CVE-2021-24885 YOP Poll < 6.1.2 - Reflected Cross-Site Scripting
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting...
6.3AI score0.00905EPSS
SaveExploits1References2
CVE-2021-24885
The CVE-2021-24885 entry describes a vulnerability in the YOP Poll WordPress plugin (versions prior to 6.1.2). The issue arises because the perpage parameter is not escaped before being output in an attribute, causing Reflected Cross-Site Scripting. Affected software: YOP Poll WordPress plugin
6.1CVSS6.1AI score0.00905EPSS
SaveExploits1References2Affected Software1
20