Read the docs

codepeople

Records130All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

codepeople records in CISA KEV

No codepeople vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Calculated Fields Form 13 records MEDIUM Appointment Booking Calendar 11 records HIGH Contact Form Email 10 records MEDIUM Wp Time Slots Booking Form 7 records MEDIUM Polls Cp 5 records MEDIUM Cp Contact Form With Paypal 4 records MEDIUM Booking Calendar Contact Form 2 records MEDIUM Form Builder Cp 2 records LOW

Records

5 records in Polls Cp · all components

TI-2024-08220 CVE-2024-8854 · GHSA-36rh-228q-4mhv

Polls CP <= 1.0.75 - Admin+ Stored XSS via Custom Styles

Priority MEDIUM 58

The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 1.0.77 CWE-79
TI-2024-08217 CVE-2024-8851 · GHSA-ccp4-cg9p-v3f5

Polls CP <= 1.0.75 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 58

The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00318 Published 2025-05-15 Fixed in 1.0.77 CWE-79
Open these records in search →