CVE-2021-24571

CVE-2021-24571 (HD Quiz WordPress plugin) : The plugin before 1.8.4 fails to escape some Answers when outputting them in HTML attributes during Quiz generation, enabling a stored XSS vulnerability. Affected component is the Answer output/embedding logic in the WordPress HD Quiz plugin (≤1.8.3). I...

CVE-2024-13383

The HD Quiz WordPress plugin versions prior to 2.0.0 are vulnerable to a Stored Cross-Site Scripting (XSS) attack due to the failure to properly sanitise and escape certain settings. This flaw allows high-privilege users, such as administrators, to execute malicious scripts, even in environments ...