Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:24 p.m.•18 views

CVE-2021-24701

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6.1AI score0.00617EPSS
SaveExploits2References1
OSV
OSV
•added 2021/11/08 6:15 p.m.•21 views

CVE-2021-24701

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00617EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/08 6:15 p.m.•28 views

CVE-2021-24701

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00617EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/11/08 6:15 p.m.•12 views

CVE-2021-24701

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.9AI score0.00617EPSS
SaveExploits2References2
CVE
CVE
•added 2021/11/08 5:35 p.m.•73 views

CVE-2021-24701

CVE-2021-24701 affects the WordPress plugin Quiz Tool Lite (versions

4.8CVSS4.8AI score0.00617EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/11/08 5:35 p.m.•41 views

CVE-2021-24701 Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

5.1AI score0.00617EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2021/11/08 12:00 a.m.•22 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

4.8CVSS5AI score0.00617EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•6 views

PT-2021-16205

Name of the Vulnerable Software and Affected Versions The Quiz Tool Lite WordPress plugin versions 2.3.15 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization in multiple input fields used for creating or managing...

4.8CVSS0.00617EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•10 views

CVE-2021-24701: Improper Neutralization of Input During Web Page Generation

The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00617EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2021/10/11 12:00 a.m.•542 views

Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. 1. When creating a new Question Pot, you can inject ...

4.8CVSS0.1AI score0.00617EPSS
SaveExploits2
Rows per page
Query Builder