Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: YOP Poll 6.3.1 Clear all filters
TI-2021-07116 CVE-2021-24834 · GHSA-4rg7-7m6h-7jqr

YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Options Module

Priority LOW 28

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbit…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01532 Published 2021-11-17 Fixed in 6.3.1 CWE-79
TI-2021-07115 CVE-2021-24833 · GHSA-ggxf-x772-3hfw

YOP Poll < 6.3.1 - Author+ Stored Cross-Site Scripting via Preview Module

Priority LOW 27

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary sc…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01124 Published 2021-11-17 Fixed in 6.3.1 CWE-79