Cross-Site Scripting Flaw in Cp-Polls Plugin for WordPress
CVE-2014-10395

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Polls Cp
Vendor
CVE Published:
27 August 2019

What is CVE-2014-10395?

The Cp-Polls plugin, prior to version 1.0.1, is susceptible to a cross-site scripting (XSS) vulnerability that arises in the votes list. Through this vulnerability, attackers can inject malicious scripts, potentially compromising the security and integrity of user data within the WordPress site. Administrators are advised to update to the latest version to mitigate risks associated with this flaw.

References

https://wordpress.org/plugins/cp-polls/#developers
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.