CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Ays Pro Poll Maker poll-maker allows Leveraging Race Conditions.This issue affects Poll Maker: from n/a through <= 5.7.7.
Explanation of Vulnerability in Simple Terms
Poll Maker versions up to 5.7.7 contain a race condition that allows an attacker to modify poll data without authentication. The vulnerability requires no user interaction and can be exploited over the network. An attacker can alter poll content, results, or settings, potentially affecting site credibility or user trust in poll functionality.
What an attacker can do
Modify poll questions, answers, or results without logging in.
Potential impact on your site
Polls may display incorrect or malicious content, undermining user trust and data integrity.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
