Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86556
HistoryOct 13, 2021 - 12:00 a.m.

WordPress Chained Quiz plugin cross-site scripting vulnerability

2021-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
chained quiz plugin
cross-site scripting
php
mysql
security vulnerability
javascript

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Chained Quiz plugin 1.2.7.2 previously contained a cross-site scripting vulnerability that stemmed from the plugin’s failure to properly clean up or escape input in the plugin’s settings. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%