Lucene search

JpcertVULNRICHMENT:CVE-2024-22027

HistoryJan 12, 2024 - 6:41 a.m.

CVE-2024-22027

2024-01-1206:41:29

jpcert

github.com

wordpress quiz maker

input validation

vulnerability

dos attack

external services

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.

References

jvn.jp/en/jp/JVN37326856/

wordpress.org/plugins/quiz-maker/