EUVD-2016-2074

Malware in sbrugna...

CVE-2016-11085: Improper Neutralization of Input During Web Page Generation

php/qmnoptionsquestionstab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the questionname parameter because js/adminquestion.js mishandles parsing inside of a SCRIPT element...