CVE-2022-4217
The CVE-2022-4217 entry concerns the WordPress plugin Chained Quiz. Affected versions are up to and including 1.3.2.2 and the root cause is insufficient input sanitization and output escaping in the api_key parameter. This enables stored cross-site scripting (XSS), where authenticated administrat...