Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86555
HistoryOct 13, 2021 - 12:00 a.m.

WordPress Quiz And Survey Master plugin cross-site scripting vulnerability

2021-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
quiz and survey master
cross-site scripting
vulnerability
php
mysql
version 7.3.2
javascript code

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. cross-site scripting vulnerability exists in versions of WordPress Quiz And Survey Master plugin prior to 7.3.2, which stems from the plugin’s failure to skip the Quiz Url Slug setting before output in certain pages. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%