VulnerabilityModified

CVE-2023-6769

Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4.

MEDIUM 4.6EPSS 0.65%

Does this matter?

Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own.

Description

Stored XSS vulnerability in Amazing Little Poll, affecting versions 1.3 and 1.4. This vulnerability allows a remote attacker to store a malicious JavaScript payload in the "lp_admin.php" file in the "question" and "item" parameters. This vulnerability could lead to malicious JavaScript execution while the page is loading.

CVSS 3.1: 4.6 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS: 0.65% probability · 49th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: mr-corner/amazing little poll
Source: cve-coordination@incibe.es

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-pollThird Party Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-amazing-little-pollThird Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.