2155 matches found
CVE-2023-6769
CVE-2023-6769 affects Amazing Little Poll versions 1.3 and 1.4. A Stored XSS flaw exists in the lp_admin.php file, where attacker-controlled data in the question and item parameters can store a malicious JavaScript payload. This payload could execute as the page loads, per the CVE/NVD description...
CVE-2023-6768
CVE-2023-6768 affects Amazing Little Poll versions 1.3 and 1.4. It describes an authentication bypass where an unauthenticated user can reach the admin panel by accessing the lp_admin.php?adminstep= parameter, enabling unauthorized access to sensitive admin functionality. The vulnerability is dem...
CVE-2023-6768 Authentication bypass vulnerability in Amazing Little Poll
Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lpadmin.php?adminstep=" parameter...
CVE-2023-6768 Authentication bypass vulnerability in Amazing Little Poll
Authentication bypass vulnerability in Amazing Little Poll affecting versions 1.3 and 1.4. This vulnerability could allow an unauthenticated user to access the admin panel without providing any credentials by simply accessing the "lpadmin.php?adminstep=" parameter...
Amazing Little Poll Cross-Site Scripting Vulnerability
Amazing Little Poll is Amazing Little Poll open source a very simple php voting script. A cross-site scripting vulnerability exists in Amazing Little Poll version 1.3 and 1.4. An attacker can exploit this vulnerability to store a malicious JavaScript payload in the "lpadmin.php" file within the...
Amazing Little Poll License Issue Vulnerability
Amazing Little Poll is Amazing Little Poll open source a very simple php voting script. An authorization issue vulnerability exists in Amazing Little Poll version 1.3, 1.4. An attacker can exploit this vulnerability to access the admin panel by bypassing authentication...
PT-2023-32770 · Unknown · Amazing Little Poll
Name of the Vulnerable Software and Affected Versions: Amazing Little Poll versions 1.3 through 1.4 Description: The issue is a Stored XSS vulnerability that allows a remote attacker to store a malicious JavaScript payload in the "lp admin.php" file using the question and item parameters. This...
PT-2023-32769 · Unknown · Amazing Little Poll
Name of the Vulnerable Software and Affected Versions: Amazing Little Poll versions 1.3 through 1.4 Description: The issue allows an unauthenticated user to access the admin panel without providing any credentials by accessing the "lp admin.php?adminstep=" parameter. This could enable unauthorize...
Poll Maker < 4.7.2 - Missing Authorization
Description The Poll Maker plugin for WordPress is vulnerable to unauthorized access of data or functionality due to a missing capability check on one of its functions in all versions up to, and including, 4.7.1. This makes it possible for unauthenticated attackers to make use of this function...
YOP Poll < 6.5.29 - Reusable Captcha via validateImage
Description The YOP Poll plugin for WordPress is vulnerable to captcha bypass due to a reusable captcha bypass in the validateImage function in all versions up to, and including, 6.5.28. This makes it possible for unauthenticated attackers to vote multiple times using the same captcha image...
CVE-2023-6109
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...
CVE-2023-6109
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...
Race condition
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...
CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper restrictions on the add function. This makes it possible for unauthenticated attackers to place multiple votes on a single poll even when the poll is set to on...
CVE-2023-6109
CVE-2023-6109 (YOP Poll) is a race-condition vulnerability in the WordPress YOP Poll plugin. The issue affects all versions up to and including 6.5.26 and stems from improper restrictions on the add() function, enabling unauthenticated attackers to place multiple votes on a single poll, even when...
YOP Poll < 6.5.27 - Unauthenticated Vote Manipulation via Race Condition
Description The plugin is affected by a race condition, allowing unauthenticated users to vote multiple times on a poll even when it's configured to only allow one vote per person...
WordPress Plugin YOP Poll Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress YOP Poll Plugin <= 6.5.26 is vulnerable to Race Condition
Software YOP Poll Type Plugin Vulnerable versions = 6.5.26 Fixed in 6.5.27 OWASP Top 10 A4: Insecure Design Classification Race Condition CVE CVE-2023-6109 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 9ac55c7b49fd Credits RIN MIYACHI Required privilege Unauthenticated...