https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 09:59:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290047 EUVD-2026-290047 https://cve.radiocsirt.org/vuln/euvd-2026-290047 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3600 <p>The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to create quizzes and inject malicious web scripts into them that execute when a user visits the page.</p> <p>The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to create quizzes and inject malicious web scripts into them that execute when a user visits the page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3600 https://cve.radiocsirt.org/vuln/ghsa-w4r6-cjx2-64gc <p>The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to create quizzes and inject malicious web scripts into them that execute when a user visits the page.</p> <p>The Poll Maker – Best WordPress Poll Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the ays_poll_maker_quick_start AJAX action in addition to insufficient escaping and sanitization in all versions up to, and including, 5.1.8. This makes it possible for unauthenticated attackers to create quizzes and inject malicious web scripts into them that execute when a user visits the page.</p> https://cve.radiocsirt.org/vuln/ghsa-w4r6-cjx2-64gc https://cve.radiocsirt.org/vuln/gsd-2024-3600 gsd-2024-3600 https://cve.radiocsirt.org/vuln/gsd-2024-3600