CP Polls < 1.0.72 - Unauthenticated Content Injection

2024-02-0900:00:00

wpscan.com

wordpress

content injection

unauthenticated

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The Polls CP plugin for WordPress is vulnerable to content injection in all versions up to, and including, 1.0.71. This is due to insufficient validation on poll answers. This makes it possible for unauthenticated attackers to inject arbitrary content.