CVE-2021-24571

CVE-2021-24571 (HD Quiz WordPress plugin) : The plugin before 1.8.4 fails to escape some Answers when outputting them in HTML attributes during Quiz generation, enabling a stored XSS vulnerability. Affected component is the Answer output/embedding logic in the WordPress HD Quiz plugin (≤1.8.3). I...

CVE-2024-22161

CVE-2024-22161 concerns WordPress plugin Harmonic Design HD Quiz. The issue is a stored XSS caused by improper input neutralization during web page generation, affecting HD Quiz versions up to and including 1.8.11. Exploitation requires elevated privileges (Administrator) per Patchstack. A fix is...

CVE-2024-13383

The HD Quiz WordPress plugin versions prior to 2.0.0 are vulnerable to a Stored Cross-Site Scripting (XSS) attack due to the failure to properly sanitise and escape certain settings. This flaw allows high-privilege users, such as administrators, to execute malicious scripts, even in environments ...