← All advisories

Medium severity6.1NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2017-18520

CVE-2017-18520

Description

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Wp Kama/Democracy Poll
cpe:2.3:a:wp-kama:democracy_poll:*:*:*:*:*:wordpress:*:*
Range: <5.4
WordPress/democracy-polldescription
WordPress/Democracy Pollllm-fuzzy
Range: <5.4
Package: https://wordpress.org/plugins/democracy-poll

Patches

Vulnerability mechanics

References

2

wordpress.org/plugins/democracy-poll/nvdRelease Notes
www.pluginvulnerabilities.com/2017/02/22/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-democracy-poll/nvdBroken Link

News mentions

0

No linked articles in our index yet.