CVE-2018-0536

QQQ SYSTEMS (ver2.24) exposes a cross-site scripting vulnerability in quiz.cgi (CWE-79). The CGI-based quiz page creator allows an attacker to inject arbitrary web scripts via quiz.cgi, potentially affecting users who load malicious pages. Reported in multiple sources (CNVD/NVD/JVN) with impact d...