2 matches found
Cross site request forgery (csrf)
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...
4.3CVSS4.3AI score0.00421EPSS
SaveExploits1References3Affected Software1
CVE-2022-4219: Cross-Site Request Forgery (CSRF)
The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage function. This makes it possible for unauthenticated attackers to delete submitted quiz responses via a forged request...
5.4CVSS5.5AI score0.00421EPSS
SaveExploits1References2
20