CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2024/05/03 1:15 a.m.•21 views

CVE-2024-34401

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

6.1CVSS5.5AI score0.00411EPSS

SaveExploits1References1

Vulnrichment•added 2024/05/03 12:00 a.m.•18 views

CVE-2024-34401

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

5.7AI score0.00411EPSS

SaveExploits1References1

CVE•added 2024/05/03 12:00 a.m.•62 views

CVE-2024-34401

Savsoft Quiz version 6.0 is vulnerable to stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The flaw exists in the quiz_name parameter within the index.php/quiz/insert_quiz/ endpoint, allowing attackers to inject and store malicious scripts....

6.1CVSS5.6AI score0.00411EPSS

SaveExploits1References1Affected Software1

Rapid7 Vulnerability Database (full)•added 2024/05/03 12:00 a.m.•3 views

CVE-2024-34401: Improper Neutralization of Input During Web Page Generation

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...

6.1CVSS5.8AI score0.00411EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by