CVE-2024-13712

CVE-2024-13712 affects the WordPress Pollin plugin. The vulnerability is an unauthenticated SQL Injection via the plugin’s question parameter, in all versions up to and including 1.01.1. Root cause is insufficient escaping of user-supplied input and lack of proper SQL query parameterization. Impa...

CVE-2024-13711

CVE-2024-13711 pertains to the Pollin WordPress plugin and is a Reflected XSS vulnerability exposed by the query parameter 'question' . Affected versions are all up to and including 1.01.1 , due to insufficient input sanitization and output escaping. The vulnerability can be exploited by unauthen...