Unknown Polls CP vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Polls CP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2024-8854codepeoplepolls_cp+2
EPSS score
0.32%
The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multi site setup).5.4CVE-2024-8851codepeoplepolls_cp+2
EPSS score
0.32%
The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multi site setup).