CVE-2023-41871: WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)
Published Sep 25, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Poll Maker Team Poll Maker plugin <= 4.7.0 versions.
Affected Software
1 affected component
ays-pro Poll Maker Wordpress<=4.7.0
Remediation
Information
Update to 4.7.1 or a higher version.
Event History
Sep 25, 2023
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2023-41871.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Poll Maker Team Poll Maker plugin <= 4.7.0 versions.'
3
What is the severity of this vulnerability?
The severity of this vulnerability is high, with a CVSS score of 6.1.
4
What software versions are affected by this vulnerability?
The Poll Maker Team Poll Maker plugin versions up to and including 4.7.0 are affected by this vulnerability.
5
Is there a fix available for this vulnerability?
Yes, a fix is available. Please refer to the provided reference link for more information.