VULNERABILITY INTELLIGENCE
CVE-2019-25297
EPSS probability0.46%
CISA KEVNot currently listed
Published2026-01-16
Last modified2026-06-17
Description
Poll, Survey & Quiz Maker Plugin by Opinion Stage Wordpress plugin versions prior to 19.6.25 contain a stored cross-site scripting (XSS) vulnerability via multiple parameters due to insufficient input validation and output escaping. An unauthenticated attacker can inject arbitrary script into content that executes when a victim views an affected page.
Weakness classification
- disclosure@vulncheck.com: CWE-79