Lucene search

Chained Quiz Security Vulnerabilities - 2020

cve

CVE-2018-14502

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.

9.8CVSS

10AI Score

0.01EPSS

2020-03-10 01:15 PM

cve

CVE-2020-7104

The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.

6.1CVSS

6AI Score

0.001EPSS

2020-01-17 11:15 PM

151