Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
Mtouch Quiz ProjectMtouch Quiz

7 matches found

CVE
CVE•added 2019/09/20 3:15 p.m.•56 views

CVE-2015-9386

The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.

6.1CVSS6AI score0.00207EPSS
CVE
CVE•added 2019/09/20 3:15 p.m.•55 views

CVE-2015-9389

The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.

5.4CVSS5.3AI score0.00178EPSS
CVE
CVE•added 2019/09/20 3:15 p.m.•52 views

CVE-2015-9388

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.

6.5CVSS6.6AI score0.0014EPSS
CVE
CVE•added 2022/08/08 2:15 p.m.•46 views

CVE-2022-2410

The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS4.7AI score0.00083EPSS
CVE
CVE•added 2019/09/20 3:15 p.m.•38 views

CVE-2015-9387

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.

6.5CVSS6.6AI score0.00153EPSS
CVE
CVE•added 2015/01/13 3:59 p.m.•36 views

CVE-2014-100023

Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php.

4.3CVSS6AI score0.00227EPSS
CVE
CVE•added 2015/01/13 3:59 p.m.•33 views

CVE-2014-100022

SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php.

7.5CVSS8.8AI score0.00424EPSS