7.1
High
CVE-2024-47297 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Polls cp-polls allows Reflected XSS.This issue affects CP Polls: from n/a through <= 1.0.74.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CP Polls 1.0 | earliest → 1.0.74 | No fix stated |
Other CVEs of CP Polls
The 4 CVEs of CP Polls →
CVE-2025-50025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP…
5.9
Medium
CVE-2024-24873
: Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP…
5.3
Medium
CVE-2024-24874
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CodePeople CP Polls…
5.3
Medium