Vulnerabilities > CVE-2021-24833 - Unspecified vulnerability in Yop-Poll YOP Poll

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

yop-poll

NVD

Published: 2021-11-17

Updated: 2024-11-21

Summary

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of question and answer text parameters in Create Poll module.

Vulnerable Configurations

Part	Description	Count
Application	Yop-Poll YOP Poll YOP Poll - YOP Poll YOP Poll 1.0 YOP Poll YOP Poll 1.1 YOP Poll YOP Poll 1.2 YOP Poll YOP Poll 1.3 YOP Poll YOP Poll 1.4 YOP Poll YOP Poll 1.5 YOP Poll YOP Poll 1.6 YOP Poll YOP Poll 1.7 YOP Poll YOP Poll 1.8 YOP Poll YOP Poll 1.9 YOP Poll YOP Poll 2.0 YOP Poll YOP Poll 3.0 YOP Poll YOP Poll 3.1 YOP Poll YOP Poll 3.2 YOP Poll YOP Poll 3.3 YOP Poll YOP Poll 3.4 YOP Poll YOP Poll 3.5 YOP Poll YOP Poll 3.6 YOP Poll YOP Poll 3.7 YOP Poll YOP Poll 3.8 YOP Poll YOP Poll 3.9 YOP Poll YOP Poll 4.0 YOP Poll YOP Poll 4.1 YOP Poll YOP Poll 4.2 YOP Poll YOP Poll 4.3 YOP Poll YOP Poll 4.4 YOP Poll YOP Poll 4.5 YOP Poll YOP Poll 4.6 YOP Poll YOP Poll 4.7 YOP Poll YOP Poll 4.8 YOP Poll YOP Poll 4.9 YOP Poll YOP Poll 4.9.1 YOP Poll YOP Poll 4.9.2 YOP Poll YOP Poll 4.9.3 YOP Poll YOP Poll 5.2 YOP Poll YOP Poll 5.3 YOP Poll YOP Poll 5.5 YOP Poll YOP Poll 5.6 YOP Poll YOP Poll 5.7 YOP Poll YOP Poll 5.7.1 YOP Poll YOP Poll 5.7.2 YOP Poll YOP Poll 5.7.3 YOP Poll YOP Poll 5.7.4 YOP Poll YOP Poll 5.7.5 YOP Poll YOP Poll 5.7.6 YOP Poll YOP Poll 5.7.7 YOP Poll YOP Poll 5.7.8 YOP Poll YOP Poll 5.7.9 YOP Poll YOP Poll 5.8.0 YOP Poll YOP Poll 5.8.1 YOP Poll YOP Poll 5.8.2 YOP Poll YOP Poll 5.8.3 YOP Poll YOP Poll 6.0.0 YOP Poll YOP Poll 6.0.1 YOP Poll YOP Poll 6.0.2 YOP Poll YOP Poll 6.0.3 YOP Poll YOP Poll 6.0.4 YOP Poll YOP Poll 6.0.5 YOP Poll YOP Poll 6.0.6 YOP Poll YOP Poll 6.0.7 YOP Poll YOP Poll 6.0.8 YOP Poll YOP Poll 6.0.9 YOP Poll YOP Poll 6.1.0 YOP Poll YOP Poll 6.1.1 YOP Poll YOP Poll 6.1.2 YOP Poll YOP Poll 6.1.4 YOP Poll YOP Poll 6.1.5 YOP Poll YOP Poll 6.1.6 YOP Poll YOP Poll 6.1.7 YOP Poll YOP Poll 6.1.8 YOP Poll YOP Poll 6.1.9 YOP Poll YOP Poll 6.2.0 YOP Poll YOP Poll 6.2.1 YOP Poll YOP Poll 6.2.2 YOP Poll YOP Poll 6.2.3 YOP Poll YOP Poll 6.2.4 YOP Poll YOP Poll 6.2.5 YOP Poll YOP Poll 6.2.6 YOP Poll YOP Poll 6.2.7 YOP Poll YOP Poll 6.2.8 YOP Poll YOP Poll 6.2.9 YOP Poll YOP Poll 6.3.0	83

Summary

Vulnerable Configurations

References