Poll, Survey, Form & Quiz Maker by OpinionStage < 19.6.25 - Unauthenticated Cross-Site Scripting (XSS)

This vulnerability has been seen actively exploited in the wild. http://www.example.com/wp-admin/admin-post.php?page=opinionstage-content-login-callback-page&email="alert1...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

Design/Logic Flaw

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

CVE-2016-10936

The wp-polls plugin before 2.73.1 for WordPress has XSS via the Poll bar option...

WordPress democracy-poll plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. democracy-poll is an online poll plugin used in it. A cross-site request forgery vulnerability exists in the WordPress democracy-poll...

WordPress democracy-poll plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. democracy-poll is an online poll plugin used in it. A cross-site scripting vulnerability exists in the WordPress democracy-poll plugin...

CVE-2017-18521

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18521

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

Cross site request forgery (csrf)

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18521

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n...

CVE-2017-18521

The CVE-2017-18521 entry concerns the WordPress Democracy Poll plugin prior to version 5.4. Multiple connected sources confirm a CSRF flaw in the admin path wp-admin/options-general.php?page=democracy-poll&subpage=l10n, potentially allowing unauthorized actions when a user is convinced to perform...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

Code injection

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via updatel10n in admin/class.DemAdminInit.php...

CVE-2017-18520

The vulnerability is in the WordPress Democracy Poll plugin (before version 5.4). The issue is an XSS in update_l10n handled by admin/class.DemAdminInit.php. Affected component: the democracy-poll plugin for WordPress; root cause: improper sanitization/escaping in the update_l10n flow leading to ...

OracleVM 3.3 / 3.4 : dbus (OVMSA-2019-0034)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix netlink poll: error 4 Zhenzhong Duan - Apply patch for CVE-2019-12749 1725574 - Fix CVE-2019-12749 1725574 - Add dbus-run-session 1268972 C Tenable Network Security, Inc. The package checks in thi...

dbus security update

1:1.2.24-11.0.1 - fix netlink poll: error 4 Zhenzhong Duan 1:1.2.24-11 - Apply patch for CVE-2019-12749 1725574 1:1.2.24-10 - Fix CVE-2019-12749 1725574...

CVE-2019-2014

In rwt3thandlegetscpollrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...