CVE-2019-9914

概要

参考情報

• seclists.org/fulldisclosure/2019/Mar/43 · Exploit
• lists.openwall.net/full-disclosure/2019/02/05/15 · Exploit
• security-consulting.icu/blog/2019/02/wordpress-yop-poll-xss · Exploit

yop-poll のその他の脆弱性

• CVE-2022-0205中 5.4The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a role as low as autho…
• CVE-2021-24885中 6.1The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Ref…