CVE-2022-1456

CVE-2022-1456: Poll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting

Vendor Unknown
Product Poll Maker
Weakness CWE-79 · XSS
Published May 30, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfiltered_html is disallowed

Key dates

02Disclosure timeline

May 30, 2022 CVE published
August 3, 2024 Record updated