CVE-2021-24690

The CVE concerns WordPress Chained Quiz plugin (before version 1.2.7.2). The root cause is improper sanitization/escaping of inputs in the plugin’s settings, enabling an authenticated stored XSS vulnerability. Impact is client-side JavaScript execution on pages like the Social Sharing settings wh...