title: Voting Record <= 2.0 - Subscriber+ Stored XSS
description: The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: Voting Record
versions:
status: affected, versionType: semver, version: 0, lessThanOrEqual: 2.0
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
}