HD Quiz < 1.8.4 – Authenticated Stored XSS | CVE 2021-24571 | Plugin Vulnerabilities

Description

The plugin does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

Proof of Concept

Create or edit a Quiz, and put the following payload as an Answers of a "Multiple Choice: Text" Question: " autofocus onfocus=alert(/XSS/) "

Then, the XSS will be triggered when viewing a page with the embed Quiz

Affects Plugins

Fixed in 1.8.4

References

CVE

URL

https://www.hackpertise.com/cve/3-cve-2021-24571/

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Original Researcher

Authenticated Stored XSS

Submitter

Asif Nawaz Minhas

Verified

Yes

WPVDB ID

377fd65f-3a8c-4f7a-9e40-046d52ec0eef

Timeline

Publicly Published

2021-07-26 (about 4 years ago)

Added

2021-07-26 (about 4 years ago)

Last Updated

2023-04-12 (about 2 years ago)

Other

Published

Title

Published

2014-11-04

Title

Ninja Forms 2.8.6 - Reflected Cross-Site Scripting (XSS)

Published

2024-02-16

Title

Ocean Extra < 2.2.5 - Contributor+ Stored XSS

Published

2023-05-10

Title

Custom Field Suite < 2.6.3 - Admin+ Stored XSS

Published

2021-08-10

Title

Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)

Published

2021-08-13

Title

Add Sidebar <= 2.0.0 - Reflected Cross-Site Scripting