A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious JavaScript into the web browser of a victim via the poll parameter in poll.php.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds