WordPress Plugin Vulnerabilities
Chained Quiz < 1.3.2.1 - Multiple Reflected Cross-Site Scripting
Description
The plugin does not sanitise and escape the ipf, emailf, dnf, pointsf and datef parameters before outputting them back in the chainedquiz_list page, leading to a Reflected Cross-Site Scripting
Affects Plugins
Fixed in 1.3.2.1 References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Muhammad Zeeshan (Xib3rR4dAr)
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-12-02 (about 3 years ago)
Added
2022-12-03 (about 3 years ago)
Last Updated
2022-12-03 (about 3 years ago)
WPScan 