cleantalk
Vulnerabilities and Security Researches

Poll Maker – Best WordPress Poll Plugin, CVE-2022-1456

CVE, Research URL

CVE-2022-1456

Published on
May 30, 2022
Research Description
The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfiltered_html is disallowed
Affected versions
Min -, max 4.0.2.
Status
vulnerable