165 matches found
WordPress plugin Chained Quiz 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
PT-2022-26280 · WordPress · Chained Quiz
Name of the Vulnerable Software and Affected Versions: Chained Quiz plugin for WordPress versions up to, and including, 1.3.2.3 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to...
PT-2022-26304 · WordPress · Chained Quiz
Name of the Vulnerable Software and Affected Versions: Chained Quiz plugin for WordPress versions up to, and including, 1.3.2.4 Description: The issue is related to Cross-Site Request Forgery due to missing nonce validation on the manage function. This allows unauthenticated attackers to delete...
CVE-2022-2410
The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Chained Quiz plugin cross-site scripting vulnerability
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Chained Quiz plugin 1.2.7.2 previously contained a cross-site scripting vulnerability that stemme...
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress Chained Quiz plugin 1.2.7.2 previously contained a cross-site scripting vulnerability that stemme...
CVE-2021-24571
The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues...
WordPress HD Quiz plugin <= 1.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Asif Nawaz Minhas in WordPress HD Quiz plugin versions = 1.8.3. Solution Update the WordPress HD Quiz plugin to the latest available version at least 1.8.4...
WordPress Very Simple Quiz plugin <= 1.0.0 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by zerodetail & ratherbland in WordPress Very Simple Quiz plugin versions = 1.0.0. Solution 2020-12-30 - we were unable to find a patched version of this plugin. Notification from WordPress.org - "This plugin has been...
Critical Flaws in WordPress Quiz Plugin Allow Site Takeover
A plugin that is designed to add quizzes and surveys to WordPress websites has patched two critical vulnerabilities. The flaws can be exploited by remote, unauthenticated attackers to launch varying attacks – including fully taking over vulnerable websites. The plugin, Quiz and Survey Master, is...
Sql injection
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters...
CVE-2018-14502
CVE-2018-14502 affects the WordPress Kiboko Chained Quiz plugin prior to 1.0.9. The vulnerability is a remote, unauthenticated SQL injection in controllers/quizzes.php via the answer/answers parameters, allowing arbitrary SQL execution (as described in multiple sources and CVE records). Exploitat...
WordPress chained-quiz cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. chained-quiz is a chained quiz creation plugin used in it. A cross-site scripting vulnerability exists in WordPress chained-quiz versi...
CVE-2020-7104
The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php totalquestions parameter...
CVE-2020-7104
CVE-2020-7104 affects the WordPress Chained Quiz plugin. Versions
WordPress mtouch-quiz plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. mtouch-quiz is a multiple choice quiz plugin used in it. A cross-site request forgery vulnerability exists in WordPress mtouch-quiz...
Cross site request forgery (csrf)
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS...
CVE-2015-9387
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...
CVE-2016-10892
The CVE-2016-10892 issue affects the WordPress plugin chained-quiz (before version 1.0). Multiple XSS vulnerabilities are described across connected sources (e.g., Red Hat, CNVD, CVE listings), indicating client-side script execution risks due to improper input handling in that plugin. The core d...