Input validation vulnerability in YOP Poll 6.1.5

The YOP Poll plugin for WordPress can be used to create polls on a website. However, versions up to and including 6.1.4 are vulnerable to a type of attack called Stored Cross-Site Scripting. This attack allows attackers with administrator level access to inject malicious web scripts into webpages. Whenever a user visits such an infected page, the malicious code will be executed on their device.