Stored Cross-site Scripting Flaw in WP Voting Contest by Matt

CVE-2025-50017

What is CVE-2025-50017?

A vulnerability exists within the WP Voting Contest plugin that permits stored Cross-site Scripting (XSS) attacks due to improper neutralization of input during web page generation. This issue poses a significant risk as it allows attackers to inject malicious scripts that may be stored and executed in the user's browser context, potentially leading to unauthorized actions or data breaches. Users of WP Voting Contest versions up to 5.8 should take caution and implement the necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References