Skip to content
OpenAdvisories
Unscored CVE-2022-2386 EUVD-2022-34652GHSA-xpmf-95jh-4h75

Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting

Published Aug 8, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Crowdsignal Dashboard WordPress plugin before 3.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— Crowdsignal Dashboard – Polls, Surveys & more 3.0.8 – < 3.0.8 3.0.8

References