CVE-2018-14502

CVE-2018-14502 affects the WordPress Kiboko Chained Quiz plugin prior to 1.0.9. The vulnerability is a remote, unauthenticated SQL injection in controllers/quizzes.php via the answer/answers parameters, allowing arbitrary SQL execution (as described in multiple sources and CVE records). Exploitat...

CVE-2021-24690

The CVE concerns WordPress Chained Quiz plugin (before version 1.2.7.2). The root cause is improper sanitization/escaping of inputs in the plugin’s settings, enabling an authenticated stored XSS vulnerability. Impact is client-side JavaScript execution on pages like the Social Sharing settings wh...

CVE-2024-37446

CVE-2024-37446 (Chained Quiz for WordPress) is a stored XSS vulnerability in Chained Quiz

CVE-2016-10892

The CVE-2016-10892 issue affects the WordPress plugin chained-quiz (before version 1.0). Multiple XSS vulnerabilities are described across connected sources (e.g., Red Hat, CNVD, CVE listings), indicating client-side script execution risks due to improper input handling in that plugin. The core d...