Lucene search
HistoryJan 13, 2015 - 3:59 p.m.
CVE-2014-100023
cve-2014-100023
xss
mtouch quiz
wordpress
nvd
security vulnerability
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.1%
Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php.
Affected configurations
Node
mtouch_quiz_projectmtouch_quizRange≤3.0.6wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| mtouch_quiz_project:mtouch_quiz | mtouch quiz project mtouch quiz | le | 3.0.6 |
Related
patchstack
patchstack
WordPress mTouch Quiz Plugin <= 3.0.6 - Multiple XSS
2015-01-13 00:00:00
wpvulndb
wpvulndb
mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS
2014-08-01 10:59:11
prion
prion
Cross site scripting
2015-01-13 15:59:00
nvd
nvd
CVE-2014-100023
2015-01-13 15:59:12
cvelist
cvelist
CVE-2014-100023
2015-01-13 15:00:00
6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.1%
Related for CVE-2014-100023