Lucene search

K
cvelistWPScanCVELIST:CVE-2021-24701
HistoryNov 08, 2021 - 5:35 p.m.

CVE-2021-24701 Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting

2021-11-0817:35:09
CWE-79
WPScan
raw.githubusercontent.com
1

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

Related for CVELIST:CVE-2021-24701