CVE-2015-9386

The CVE-2015-9386 entry concerns the mtouch-quiz WordPress plugin, affected in versions before 3.1.3. The provided documents describe an XSS vulnerability via the quiz parameter during a Quiz Manage operation. This is supported by multiple sources (NVD entry notes XSS in mtouch-quiz before 3.1.3;...

CVE-2015-9389

CVE-2015-9389 affects the mTouch Quiz WordPress plugin prior to version 3.1.3 , with XSS via the quiz name . The vulnerability is described in multiple sources as a client‑side/script injection issue in the plugin’s quiz name field, enabling cross‑site scripting. The supplied connected documents ...

CVE-2015-9388

CVE-2015-9388 affects the WordPress mtouch-quiz plugin, specifically versions prior to 3.1.3. The vulnerability is a CSRF on wp-admin/edit.php that can result in cross-site scripting (XSS). Red Hat and NVD entries corroborate the issue. Impact is partial integrity compromise (per CVSS) with no co...

CVE-2015-9387

The CVE-2015-9387 entry concerns the mTouch Quiz WordPress plugin prior to version 3.1.3. The root cause is a cross-site request forgery (CSRF) vulnerability in wp-admin/options-general.php, which could allow an attacker to induce an administrator’s browser to perform unwanted actions on the Word...