WordPress YOP Poll Plugin Cross-Site Scripting Vulnerability

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress YOP Poll Plugin version 6.3.5 before the cross-site scripting vulnerability, the vulnerability stems from the plugin in the output of certain settings before they are not cleaned and escaped, an attacker can use the vulnerability to execute JavaScript code on the client side.