CVE-2014-4856

Polldaddy Polls & Ratings WordPress plugin vulnerability CVE-2014-4856 concerns an XSS flaw in versions prior to 2.0.25 triggered via the ratings shortcode and a unique_id parameter. The issue allows remote attackers to inject arbitrary script/HTML. Affected product: Polldaddy Polls & Ratings plu...