Lucene search
K

19 matches found

EUVD
EUVD
added 2026/03/27 9:31 p.m.4 views

EUVD-2026-16807

A vulnerability was detected in SourceCodester Online Quiz System hasta 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the...

5.1CVSS4.5AI score0.00239EPSS
Exploits0References6
NVD
NVD
added 2026/03/27 8:16 p.m.3 views

CVE-2026-4973

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the...

5.1CVSS0.00239EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/27 7:52 p.m.2 views

CVE-2026-4973 SourceCodester Online Quiz System add-question.php cross site scripting

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the...

5.1CVSS4.4AI score0.00239EPSS
Exploits0References5
CVE
CVE
added 2026/03/27 7:52 p.m.9 views

CVE-2026-4973

SourceCodester Online Quiz System hasta 1.0 contains a cross-site scripting (XSS) vulnerability in an unknown functionality of endpoint/add-question.php. By manipulating the quiz_question argument, an attacker can trigger XSS, with remote access possible and the exploit publicly available. The pr...

5.1CVSS4.4AI score0.00239EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/27 7:52 p.m.26 views

CVE-2026-4973 SourceCodester Online Quiz System add-question.php cross site scripting

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the...

5.1CVSS0.00239EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.8 views

PT-2026-28698

Name of the Vulnerable Software and Affected Versions SourceCodester Online Quiz System version 1.0 Description A flaw exists in SourceCodester Online Quiz System that allows for cross site scripting. This issue is related to the manipulation of the quiz question argument within the...

5.1CVSS4.7AI score0.00239EPSS
Exploits0References7
OSV
OSV
added 2024/02/07 8:15 a.m.1 views

CVE-2024-1078

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aysquickstart and addquestionrows functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS7.4AI score0.00359EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/07 12:0 a.m.4 views

PT-2024-16539 · WordPress · Quiz Maker

Name of the Vulnerable Software and Affected Versions: The Quiz Maker plugin for WordPress versions up to, and including, 6.5.2.4 Description: The issue is related to a missing capability check on the ays quick start and add question rows functions. This allows authenticated attackers with...

4.3CVSS5.2AI score0.00359EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/02/07 12:0 a.m.5 views

WordPress Plugin Quiz Maker Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.6AI score0.00359EPSS
Exploits0References3
OSV
OSV
added 2023/06/02 2:15 p.m.2 views

CVE-2023-3060

A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQuestion of the file btnfunctions.php. The manipulation of the argument Question leads to cross site scripting. The attack can be initiated...

5.4CVSS3.9AI score0.00594EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/06/02 12:0 a.m.3 views

Agro-School Management System 跨站脚本漏洞

Agro-School Management System is an agricultural school management system. code-projects A cross-site scripting vulnerability exists in Agro-School Management System version 1.0, which stems from a security issue in the function doAddQuestion in btnfunctions.php, which leads to cross-site scripti...

5.4CVSS4.6AI score0.00594EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/06/02 12:0 a.m.4 views

PT-2023-22801 · Code Projects · Agro-School Management System

Name of the Vulnerable Software and Affected Versions: code-projects Agro-School Management System version 1.0 Description: A vulnerability has been found in the code-projects Agro-School Management System, affecting the function doAddQuestion of the file btn functions.php. The manipulation of th...

5.4CVSS6.4AI score0.00594EPSS
Exploits1References7
OSV
OSV
added 2023/04/30 3:30 a.m.15 views

GHSA-8595-6653-96P2 phpMyFAQ vulnerable to Stored Cross-site Scripting

phpMyFAQ prior to version 3.1.13 has a stored cross site scripting vulnerability in name field in add question module. This allows an attacker to steal user cookies...

6.1CVSS5.3AI score0.00559EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/04/30 3:30 a.m.22 views

phpMyFAQ vulnerable to Stored Cross-site Scripting

phpMyFAQ prior to version 3.1.13 has a stored cross site scripting vulnerability in name field in add question module. This allows an attacker to steal user cookies...

6.1CVSS5.2AI score0.00559EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/30 12:0 a.m.5 views

PT-2023-19508 · Phpmyfaq · Phpmyfaq

Name of the Vulnerable Software and Affected Versions: phpMyFAQ versions prior to 3.1.13 Description: The issue is related to a stored Cross-site Scripting XSS vulnerability. This vulnerability allows an attacker to steal user cookies by exploiting the name field in the add question module...

6.1CVSS6.4AI score0.00559EPSS
Exploits0References12
Huntr
Huntr
added 2023/04/05 1:47 p.m.22 views

Stored cross site scripting vulnerability in thorsten/phpmyfaq

Description Stored cross site scripting vulnerability in "name" field in add question module. This allows attacker to stolen user cookies. Proof of Concept 1 . Login to the demo account https://roy.demo.phpmyfaq.de/ 2 . Login as demo user 3 . Click add question 4 . Add payload in "Your Name"...

4.9CVSS5.2AI score0.00559EPSS
Exploits0
Huntr
Huntr
added 2023/01/11 2:10 p.m.24 views

Dom XSS in Add Question

Description Evil users can attack other users or administrator users through this vulnerability, causing other users/administrator user accounts to be taken over Proof of Concept step1. Add a normal user and log in step2. Add a new question and insert xss payload in the body Step3. Login admin us...

6CVSS8.5AI score0.00871EPSS
Exploits1
Huntr
Huntr
added 2022/12/17 2:35 p.m.32 views

Blind Stored XSS in admin panel (open question page)

Description Blind stored XSS via any unauthorized or anonymous visitor user without any privileges can inject XSS payload in "Add question" page in "Your Name" input field then it will be executed in admin panel in Open Question page Proof of Concept...

4.9CVSS5.2AI score0.00487EPSS
Exploits0
OSV
OSV
added 2022/08/05 9:15 p.m.4 views

CVE-2022-2685

A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input alert1 leads to cross site scripting. The attack may be...

6.1CVSS3.8AI score0.00704EPSS
Exploits1References3
Rows per page
Query Builder