Lucene search

K
cvelistWPScanCVELIST:CVE-2021-24690
HistoryOct 11, 2021 - 10:45 a.m.

CVE-2021-24690 Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting

2021-10-1110:45:41
CWE-79
WPScan
www.cve.org
3
chained quiz
wordpress
authenticated stored xss
plugin settings
input sanitization

EPSS

0.001

Percentile

24.8%

The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin’s settings.

CNA Affected

[
  {
    "product": "Chained Quiz",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.2.7.2",
        "status": "affected",
        "version": "1.2.7.2",
        "versionType": "custom"
      }
    ]
  }
]

EPSS

0.001

Percentile

24.8%

Related for CVELIST:CVE-2021-24690