PT-2018-8896

Name of the Vulnerable Software and Affected Versions QQQ SYSTEMS version 2.24 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via the "quiz op.cgi" API endpoint. Recommendations For QQQ SYSTEMS version 2.24, consider restricting access to the qu...