Plugin icon

Chained Quiz

chained-quiz

Vulnerabilities:

18

Last Updated:

June 9, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-09-17
Title
Chained Quiz < 1.3.6 - Unauthenticated Insecure Direct Object Reference via Cookie
Fixed in
Fixed in 1.3.6
CVSS
5.3 (medium)
Published
2025-01-24
Title
Chained Quiz < 1.3.3 - Authenticated (Admin+) Server-Side Request Forgery
Fixed in
Fixed in 1.3.3
CVSS
5.5 (medium)
Published
2024-07-09
Title
Chained Quiz < 1.3.2.9 - Missing Authorization
Fixed in
Fixed in 1.3.2.9
CVSS
5.3 (medium)
Published
2024-06-28
Title
Chained Quiz < 1.3.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.2.9
CVSS
4.4 (medium)
Published
2023-02-06
Title
Chained Quiz < 1.3.2.6 - Admin+ Stored XSS
Fixed in
Fixed in 1.3.2.6
CVSS
3.5 (low)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.5 - Arbitrary Question Deletion via CSRF
Fixed in
Fixed in 1.3.2.5
CVSS
4.3 (medium)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.2.3
CVSS
6.1 (medium)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.1 - Multiple Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.2.1
CVSS
6.1 (medium)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.5 - Submitted Quiz Response Deletion via CSRF
Fixed in
Fixed in 1.3.2.5
CVSS
4.3 (medium)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.4 - Multiple Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.2.4
CVSS
6.1 (medium)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.3 - Admin+ Stored XSS
Fixed in
Fixed in 1.3.2.3
CVSS
3.4 (low)
Published
2022-12-02
Title
Chained Quiz < 1.3.2.5 - Arbitrary Quiz Deletion & Copying via CSRF
Fixed in
Fixed in 1.3.2.5
CVSS
4.3 (medium)
Published
2021-09-07
Title
Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
Fixed in
Fixed in 1.2.7.2
CVSS
3.8 (low)
Published
2020-02-21
Title
Chained Quiz < 1.1.9.1 - Authenticated Stored XSS
Fixed in
Fixed in 1.1.9.1
CVSS
n/a
Published
2020-01-16
Title
Chained Quiz < 1.1.8.2 - Unauthenticated Reflected XSS
Fixed in
Fixed in 1.1.8.2
CVSS
6.1 (medium)
Published
2018-08-16
Title
Chained Quiz <= 1.0.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.0.9
CVSS
9.8 (critical)
Published
2016-12-21
Title
Chained Quiz <= 0.9.8 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 0.9.9
CVSS
n/a
Published
2016-12-21
Title
Chained Quiz < 1.0 - Multiple XSS
Fixed in
Fixed in 1.0
CVSS
6.1 (medium)