CVE-2018-17140

The CVE-2018-17140 entry affects the Quizlord WordPress plugin (version 2.0 and earlier). The vulnerability is a Stored XSS via the title parameter in a ql_insert action to wp-admin/admin.php, allowing arbitrary script injection when a user submits a crafted title. Documents corroborate this XSS ...