CVE-2017-18601

CVE-2017-18601 affects the WordPress plugin examapp 1.0, with a Cross-Site Scripting (XSS) vulnerability via exam input text fields. Red Hat and NVD entries confirm the issue, and exploit details in WPExploit references show authenticated stored XSS and, in associated advisories, a Blind SQL Inje...

CVE-2017-18602

CVE-2017-18602 affects the WordPress examapp plugin 1.0, with an SQL injection via wp-admin/admin.php?page=examapp_UserResult id. Red Hat and NVD entries confirm the vulnerability in the examapp_UserResult parameter; exploit references (e.g., Exploit-DB) show authenticated SQL injection activity ...