CVE-2014-100023

CVE-2014-100023 affects the WordPress mTouch Quiz plugin (before 3.0.7). The vulnerability is a cross-site scripting (XSS) in question.php where the quiz parameter sent to wp-admin/edit.php can inject arbitrary script/HTML. Documented as reflected XSS in various sources; impact is remote attacker...