Lucene search
ShivamRaiWPEX-ID:B2F473B4-268C-48B7-95E8-0A8EEAA3FC28HistorySep 07, 2021 - 12:00 a.m.
Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
2021-09-0700:00:00
ShivamRai
297
chained quiz
authenticated stored cross site scripting
wp admin panel
social sharing page
xss
exploit
EPSS
0.001
Percentile
24.8%
The plugin does not properly sanitize or escape inputs in the plugin’s settings.
Open "Chained Quiz > Social Sharing" in the WP admin panel.
Under title field enter the payload :
"><script>alert(document.domain)</script>
Click on Save All Setting and the XSS will fire every time the Social Sharing page is loaded.Related
prion
prion
Code injection
2021-10-11 11:15:00
cnvd
cnvd
WordPress Chained Quiz plugin cross-site scripting vulnerability
2021-10-13 00:00:00
patchstack
patchstack
cvelist
cvelist
nvd
nvd
CVE-2021-24690
2021-10-11 11:15:09
cve
cve
CVE-2021-24690
2021-10-11 11:15:09
wpvulndb
wpvulndb
Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
2021-09-07 00:00:00