CVE-2020-7104

CVE-2020-7104 affects the WordPress Chained Quiz plugin. Versions

CVE-2018-14502

CVE-2018-14502 affects the WordPress Kiboko Chained Quiz plugin prior to 1.0.9. The vulnerability is a remote, unauthenticated SQL injection in controllers/quizzes.php via the answer/answers parameters, allowing arbitrary SQL execution (as described in multiple sources and CVE records). Exploitat...

CVE-2022-4208

CVE-2022-4208 affects the WordPress plugin “Chained Quiz”. The vulnerability is a Reflected Cross-Site Scripting flaw in the chainedquiz_list page, triggered by the datef parameter due to insufficient input sanitization and output escaping. Affected version range includes up to and including 1.3....

CVE-2022-4220

The CVE-2022-4220 case affects the WordPress plugin Chained Quiz (WordPress) up through version 1.3.2.4 . Root cause: missing nonce validation in the function list_questions() , enabling CSRF. Consequence: unauthenticated attackers could delete quiz questions by tricking an administrator into per...

CVE-2023-25027

CVE-2023-25027 : A stored XSS vulnerability exists in the WordPress plugin Chained Quiz (Kiboko Labs) up to version 1.3.2.5 . The issue requires admin+ authentication and is triggered via stored input in the plugin, enabling cross‑site scripting when viewed by others. The vulnerability is address...

CVE-2021-24690

The CVE concerns WordPress Chained Quiz plugin (before version 1.2.7.2). The root cause is improper sanitization/escaping of inputs in the plugin’s settings, enabling an authenticated stored XSS vulnerability. Impact is client-side JavaScript execution on pages like the Social Sharing settings wh...

CVE-2022-4217

The CVE-2022-4217 entry concerns the WordPress plugin Chained Quiz. Affected versions are up to and including 1.3.2.2 and the root cause is insufficient input sanitization and output escaping in the api_key parameter. This enables stored cross-site scripting (XSS), where authenticated administrat...

CVE-2024-37446

CVE-2024-37446 (Chained Quiz for WordPress) is a stored XSS vulnerability in Chained Quiz

CVE-2022-4212

The CVE-2022-4212 entry concerns the WordPress Chained Quiz plugin (versions up to and including 1.3.2) vulnerable to Reflected XSS via the ipf parameter on the chainedquiz_list page due to insufficient input sanitization and output escaping. Affected component: Chained Quiz plugin for WordPress....

CVE-2022-4215

The CVE-2022-4215 entry concerns the Chained Quiz WordPress plugin with a Reflected Cross-Site Scripting vulnerability via the date parameter on the chainedquiz_list page, affecting versions up to and including 1.3.2.3. The vulnerability stems from insufficient input sanitization and output escap...

CVE-2022-4216

The CVE-2022-4216 issue affects the WordPress Chained Quiz plugin. A stored XSS exists via the facebook_appid parameter in versions up to 1.3.2.2 due to insufficient input sanitization and output escaping. Exploitation requires authenticated administrators, who can inject scripts into pages that ...

CVE-2022-4211

CVE-2022-4211 concerns the WordPress plugin Chained Quiz . The issue is a Reflected Cross-Site Scripting vulnerability in which the parameter emailf on the page chainedquiz_list can be exploited due to insufficient input sanitization and output escaping. Affected versions are up to and including ...

CVE-2022-4213

The CVE-2022-4213 entry affects the WordPress plugin Chained Quiz. A Reflected Cross-Site Scripting vulnerability exists via the dn parameter on the chainedquiz_list page, caused by insufficient input sanitization and output escaping. Affected versions are up to 1.3.2.2; some sources indicate a f...

CVE-2022-4210

CVE-2022-4210: The WordPress plugin Chained Quiz is vulnerable to Reflected Cross-Site Scripting via the dnf parameter on the chainedquiz_list page, affecting versions up to and including 1.3.2. The root cause is insufficient input sanitization and output escaping. Unauthenticated attackers could...

CVE-2022-4209

The CVE-2022-4209 issue affects the WordPress plugin Chained Quiz . The vulnerability is a Reflected Cross-Site Scripting flaw in the page chainedquiz_list , exploitable via the pointsf parameter in versions up to and including 1.3.2 . Root cause: insufficient input sanitization and output escapi...

CVE-2022-4214

CVE-2022-4214 affects the WordPress Chained Quiz plugin up to version 1.3.2.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) via the ip parameter on the chainedquiz_list page caused by insufficient input sanitization and output escaping. Exploitation requires user interaction (e.g.,...

CVE-2022-4219

The CVE-2022-4219 entry concerns the WordPress plugin Chained Quiz . Affected versions are up to and including 1.3.2.4, with a root cause of missing nonce validation in the plugin’s manage() function. This allows unauthenticated attackers to trigger CSRF and delete submitted quiz responses by com...

CVE-2022-4218

The CVE-2022-4218 entry concerns the WordPress plugin Chained Quiz, affected through version 1.3.2.4. The root cause is missing nonce validation in the list_quizzes() function, enabling Cross-Site Request Forgery. This allows unauthenticated attackers to delete quizzes and copy quizzes by trickin...

CVE-2016-10892

The CVE-2016-10892 issue affects the WordPress plugin chained-quiz (before version 1.0). Multiple XSS vulnerabilities are described across connected sources (e.g., Red Hat, CNVD, CVE listings), indicating client-side script execution risks due to improper input handling in that plugin. The core d...