Vulnerabilities > CVE-2021-24834 - Unspecified vulnerability in Yop-Poll YOP Poll

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

yop-poll

NVD

Published: 2021-11-17

Updated: 2024-11-21

Summary

The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of custom label parameters - vote button label , results link label and back to vote caption label.

Vulnerable Configurations

Part	Description	Count
Application	Yop-Poll YOP Poll YOP Poll - YOP Poll YOP Poll 1.0 YOP Poll YOP Poll 1.1 YOP Poll YOP Poll 1.2 YOP Poll YOP Poll 1.3 YOP Poll YOP Poll 1.4 YOP Poll YOP Poll 1.5 YOP Poll YOP Poll 1.6 YOP Poll YOP Poll 1.7 YOP Poll YOP Poll 1.8 YOP Poll YOP Poll 1.9 YOP Poll YOP Poll 2.0 YOP Poll YOP Poll 3.0 YOP Poll YOP Poll 3.1 YOP Poll YOP Poll 3.2 YOP Poll YOP Poll 3.3 YOP Poll YOP Poll 3.4 YOP Poll YOP Poll 3.5 YOP Poll YOP Poll 3.6 YOP Poll YOP Poll 3.7 YOP Poll YOP Poll 3.8 YOP Poll YOP Poll 3.9 YOP Poll YOP Poll 4.0 YOP Poll YOP Poll 4.1 YOP Poll YOP Poll 4.2 YOP Poll YOP Poll 4.3 YOP Poll YOP Poll 4.4 YOP Poll YOP Poll 4.5 YOP Poll YOP Poll 4.6 YOP Poll YOP Poll 4.7 YOP Poll YOP Poll 4.8 YOP Poll YOP Poll 4.9 YOP Poll YOP Poll 4.9.1 YOP Poll YOP Poll 4.9.2 YOP Poll YOP Poll 4.9.3 YOP Poll YOP Poll 5.2 YOP Poll YOP Poll 5.3 YOP Poll YOP Poll 5.5 YOP Poll YOP Poll 5.6 YOP Poll YOP Poll 5.7 YOP Poll YOP Poll 5.7.1 YOP Poll YOP Poll 5.7.2 YOP Poll YOP Poll 5.7.3 YOP Poll YOP Poll 5.7.4 YOP Poll YOP Poll 5.7.5 YOP Poll YOP Poll 5.7.6 YOP Poll YOP Poll 5.7.7 YOP Poll YOP Poll 5.7.8 YOP Poll YOP Poll 5.7.9 YOP Poll YOP Poll 5.8.0 YOP Poll YOP Poll 5.8.1 YOP Poll YOP Poll 5.8.2 YOP Poll YOP Poll 5.8.3 YOP Poll YOP Poll 6.0.0 YOP Poll YOP Poll 6.0.1 YOP Poll YOP Poll 6.0.2 YOP Poll YOP Poll 6.0.3 YOP Poll YOP Poll 6.0.4 YOP Poll YOP Poll 6.0.5 YOP Poll YOP Poll 6.0.6 YOP Poll YOP Poll 6.0.7 YOP Poll YOP Poll 6.0.8 YOP Poll YOP Poll 6.0.9 YOP Poll YOP Poll 6.1.0 YOP Poll YOP Poll 6.1.1 YOP Poll YOP Poll 6.1.2 YOP Poll YOP Poll 6.1.4 YOP Poll YOP Poll 6.1.5 YOP Poll YOP Poll 6.1.6 YOP Poll YOP Poll 6.1.7 YOP Poll YOP Poll 6.1.8 YOP Poll YOP Poll 6.1.9 YOP Poll YOP Poll 6.2.0 YOP Poll YOP Poll 6.2.1 YOP Poll YOP Poll 6.2.2 YOP Poll YOP Poll 6.2.3 YOP Poll YOP Poll 6.2.4 YOP Poll YOP Poll 6.2.5 YOP Poll YOP Poll 6.2.6 YOP Poll YOP Poll 6.2.7 YOP Poll YOP Poll 6.2.8 YOP Poll YOP Poll 6.2.9 YOP Poll YOP Poll 6.3.0	83

Summary

Vulnerable Configurations

References