Description
The YOP Poll WordPress plugin before 6.1.2 does not escape the perpage parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | YOP Poll | 6.1.2 – < 6.1.2 | 6.1.2 |