CVE-2024-0873: Improper Neutralization of Input During Web Page Generation

The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

CVE-2024-0872: Authorization Bypass Through User-Controlled Key

The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to extract sensitive user meta data which ca...

PT-2024-15881

Name of the Vulnerable Software and Affected Versions Watu Quiz plugin for WordPress versions up to, and including, 3.4.1 Description The issue allows authenticated attackers with contributor-level access and above to extract sensitive user meta data, including session tokens and user emails, via...

WordPress Plugin Watu Quiz 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

WordPress Watu Quiz plugin <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Lucio Sá in WordPress Plugin Watu Quiz versions = 3.4.1...

WordPress Watu Quiz plugin <= 3.4.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered by Lucio Sá in WordPress Plugin Watu Quiz versions = 3.4.1...

WordPress Watu Quiz Plugin <= 3.4.1 is vulnerable to Sensitive Data Exposure

Software Watu Quiz Type Plugin Vulnerable versions = 3.4.1 Fixed in 3.4.1.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-0872 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 458d166de345 Credits Lucio Sá Required privilege...

WordPress Watu Quiz Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)

Software Watu Quiz Type Plugin Vulnerable versions = 3.4.1 Fixed in 3.4.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0873 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dd9c2f3d3e10 Credits Lucio Sá Required privilege...

Watu Quiz < 3.4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Description The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

Watu Quiz < 3.4.1.1 - Sensitive Information Disclosure

Description The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to extract sensitive user meta...

CVE-2023-30483

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

CVE-2023-30483

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

CVE-2023-30483

CVE-2023-30483 (Watu Quiz, Kiboko Labs) is an unauthenticated, reflected XSS vulnerability in the WordPress Watu Quiz plugin up to version 3.3.9.2. The issue is triggered via the plugin’s input handling (e.g., the vulnerable “question” parameter per public disclosures) and can allow execution of ...

CVE-2023-30483 WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

CVE-2023-30483 WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

WordPress plugin Watu Quiz cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-22721 · Kiboko · Kiboko Labs Watu Quiz Plugin

Name of the Vulnerable Software and Affected Versions: Kiboko Labs Watu Quiz plugin versions = 3.3.9.2 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal...

CVE-2023-30483: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...

The vulnerability of the watu_exams function (controllers/exam.php) in the Watu Quiz plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the watuexams function controllers/exam.php in the Watu Quiz plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...