Security Advisory

CVE-2019-25297

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-16 20:14:10

Last updated 2026-01-16 21:08:52

Assigner VulnCheck

CVSS score 5.1

State PUBLISHED

Description

Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contain a stored cross-site scripting (XSS) vulnerability via multiple parameters due to insufficient input validation and output escaping. An unauthenticated attacker can inject arbitrary script into content that executes when a victim views an affected page.

← Browse all CVEs View on cve.org ↗