CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a through <= 19.11.0.
Explanation of Vulnerability in Simple Terms
The Poll, Survey & Quiz Maker plugin by Opinion Stage contains a vulnerability that allows attackers to read sensitive data, modify site content, or disrupt service. The attack requires network access and user interaction—typically a victim clicking a malicious link. All versions up to 19.11.0 are affected. Site administrators should update to a version newer than 19.11.0 as soon as available.
What an attacker can do
Read sensitive data, modify site content, or disrupt service by tricking a user into clicking a link.
Potential impact on your site
Visitor data may be exposed, site content could be altered, or the plugin could become unavailable.
Conditions required to exploit
Network access and user interaction required; no authentication needed.
Key dates
External resources
Related vulnerabilities
