Lucene search
+L

1 matches found

wpexploit
wpexploit
added 2021/07/26 12:00 a.m.634 views

HD Quiz < 1.8.4 - Authenticated Stored XSS

The plugin does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues Create or edit a Quiz, and put the following payload as an Answers of a "Multiple Choice: Text" Question: " autofocus...

3.5CVSS0.4AI score0.00624EPSS
SaveExploits2
Rows per page
Query Builder