Lucene search

K
wpvulndbWpvulndbWPVDB-ID:470E61B5-527D-40A6-B326-C731376F0AD6
HistoryDec 02, 2022 - 12:00 a.m.

Chained Quiz < 1.3.2.1 - Multiple Reflected Cross-Site Scripting

2022-12-0200:00:00
wpscan.com
9
chained quiz
plugin
vulnerability
version 1.3.2.1
reflected cross-site scripting

0.001 Low

EPSS

Percentile

39.9%

The plugin does not sanitise and escape the ipf, emailf, dnf, pointsf and datef parameters before outputting them back in the chainedquiz_list page, leading to a Reflected Cross-Site Scripting

CPENameOperatorVersion
chained-quizlt1.3.2.3

0.001 Low

EPSS

Percentile

39.9%

Related for WPVDB-ID:470E61B5-527D-40A6-B326-C731376F0AD6