Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting

The plugin does not properly sanitize or escape inputs in the plugin’s settings.

PoC

Open “Chained Quiz > Social Sharing” in the WP admin panel. Under title field enter the payload : "> Click on Save All Setting and the XSS will fire every time the Social Sharing page is loaded.