JVN#96655441: QQQ SYSTEMS vulnerable to cross-site scripting

QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quiz_op.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability (CWE-79).
When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on the user’s browser.

Impact

A fake page may be shown on a user’s browser. Sensitive information may be retrieved such as Cookie data.

Solution

Consider stop using QQQ SYSTEMS ver2.24
Since the developer was unreachable, it is unknown whether any mitigations exist.