WordPress Plugin Vulnerabilities

mTouch Quiz 3.0.6 - question.php quiz Parameter Reflected XSS

Description

The mTouch Quiz WordPress plugin was affected by a question.php quiz Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
mtouch-quiz
Fixed in 3.0.7

References

CVE
CVE-2014-100023

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
777d8897-aa50-4e3d-9b89-0654e51e46cb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-09-22
Title
Geolocation IP Detection < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-25
Title
AcyMailing SMTP Newsletter < 8.6.3 - Reflected XSS
Published
2025-11-10
Title
WP Bootstrap Tabs <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2023-02-15
Title
Service Area Postcode Checker <= 2.0.8 - Admin+ Stored XSS
Published
2024-12-14
Title
Utech World Time <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting