This vulnerability (CWE-79) in WP Poll Maker allows an attacker with high privileges and user interaction to inject malicious scripts that are stored and later executed in the context of the victim's browser. The issue arises from improper input sanitization during web page generation. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low to medium level.

Successful exploitation could lead to execution of arbitrary scripts in the context of users viewing the affected poll pages, potentially leading to data disclosure, modification, or denial of service. However, exploitation requires high privileges and user interaction, which limits the ease of attack. There are no known active exploits currently.

No official patch or remediation is currently available. Users should monitor the vendor's advisory channels for updates. Until a fix is released, restricting high-privilege user access and exercising caution with user-generated content in the plugin may reduce risk.