Quiz Maker < 6.4.2.7 – Reflected XSS | CVE 2023-2571 | Plugin Vulnerabilities

Description

The plugin does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Proof of Concept

Make a logged in admin open the URL below (other URL are also affected)

https://example.com/wp-admin/admin.php?page=quiz-maker-settings&ays_quiz_tab=" accesskey=X onclick=alert(/XSS/)//

The XSS will be triggered when pressing ALT+SHIFT+X on Windows and CTRL+ALT+X on OS X

Affects Plugins

Fixed in 6.4.2.7

References

CVE

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Erwan LR (WPScan)

Verified

Yes

WPVDB ID

2dc02e5c-1c89-4053-a6a7-29ee7b996183

Timeline

Publicly Published

2023-05-15 (about 2 years ago)

Added

2023-05-15 (about 2 years ago)

Last Updated

2023-05-15 (about 2 years ago)

Other

Published

Title

Published

2025-01-16

Title

Easy Bet <= 1.0.7 - Reflected Cross-Site Scripting

Published

2023-07-24

Title

Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS

Published

2021-04-23

Title

Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

Published

2022-01-14

Title

WHMCS Bridge < 6.3 - Subscriber+ Stored Cross-Site Scripting

Published

2024-07-16

Title

Ultimate Addons for WPBakery Page Builder < 3.19.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode