CVE Feed

    Dashboard / CVE / CVE-2017-2127

    CVE-2017-2127

    Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    Published:Apr 28, 2017
    Last Modified:Apr 20, 2025
    EPS:Apr 28, 2017
    EPSS Score:0.00192
    CVSS Score:5.4

    Affected Products

    Vendor
    Yop-poll
    Product
    Yop Poll

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-64370 (CVSS 5.3) — Missing Authorization vulnerability in YOP YOP Poll yop-poll allows Exploiting Incorrectly Configured Access C…
    CVE-2025-62040 (CVSS 7.1) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YOP YOP …
    CVE-2023-6109 (CVSS 5.3) — The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.…
    CVE-2022-1600 (CVSS 5.3) — The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over P…
    CVE-2021-24834 (CVSS 5.4) — The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which ex…
    CVE-2021-24833 (CVSS 5.4) — The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which e…
    CVE-2021-24454 (CVSS 6.1) — In the YOP Poll WordPress plugin before 6.2.8, when a pool is created with the options "Allow other answers", …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High