Medium · 5.3 CVE-2024-24874 EUVD-2024-22237GHSA-g5h8-25hr-rhch

WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71.

Affected products

Vendor	Product	Affected	Fixed
CodePeople	CP Polls	≤ 1.0.71	—

References

https://patchstack.com/database/vulnerability/cp-polls/wordpress-polls-cp-plugin-1-0-71-content-injection-vulnerability?_s_id=cve vdb-entry