CVE-2021-28006

CVE-2021-28006 affects Web Based Quiz System 1.0 with a reflected/stored XSS vulnerability in the admin.php endpoint via the options parameter. The Red Hat, CNVD, NVD, and CVE records in the connected documents corroborate a cross-site scripting flaw in this component, enabling attacker-injected ...

CVE-2021-28007

CVE-2021-28007 affects Web Based Quiz System 1.0 and is a reflected/stored cross-site scripting (XSS) vulnerability in register.php via the name parameter. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE listing, CNNVD) with consistent description: XSS in the register.p...