CVE-2017-18520

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-08-20

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Democracy Poll (Wp-kama)

References

• https://wordpress.org/plugins/democracy-poll/#developers
• https://www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-…