3 matches found
CVE-2024-34401
Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...
6.1CVSS5.5AI score0.00411EPSS
SaveExploits1References1
CVE-2024-34401
Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insertquiz/ quizname parameter...
5.7AI score0.00411EPSS
SaveExploits1References1
CVE-2024-34401
Savsoft Quiz version 6.0 is vulnerable to stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The flaw exists in the quiz_name parameter within the index.php/quiz/insert_quiz/ endpoint, allowing attackers to inject and store malicious scripts....
6.1CVSS5.6AI score0.00411EPSS
SaveExploits1References1Affected Software1
20