Chained Quiz < 1.2.7.2 – Authenticated Stored Cross Site Scripting | CVE 2021-24690

Description

The plugin does not properly sanitize or escape inputs in the plugin's settings.

Proof of Concept

Open "Chained Quiz > Social Sharing" in the WP admin panel.

Under title field enter the payload : 

"><script>alert(document.domain)</script>

Click on Save All Setting and the XSS will fire every time the Social Sharing page is loaded.

Affects Plugins

chained-quiz

Fixed in 1.2.7.2

References

CVE

CVE-2021-24690

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CWE-79

CVSS

3.8 (low)

Miscellaneous

Original Researcher

Shivam Rai

Submitter

ShivamRai

Submitter twitter

shivam24rai

Verified

Yes

WPVDB ID

b2f473b4-268c-48b7-95e8-0a8eeaa3fc28

Timeline

Publicly Published

2021-09-07 (about 4 years ago)

Added

2021-09-07 (about 4 years ago)

Last Updated

2022-04-12 (about 3 years ago)

Other

Published

Title

Published

2024-02-19

Title

ProfilePress < 4.15.0 - Contributor+ Stored XSS

Published

2025-02-28

Title

Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site < 2.0.7 - Authenticated (Administrator+) DOM-Based Stored Cross-Site Scripting

Published

2024-02-27

Title

Custom fields shortcode <= 0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Published

2021-10-18

Title

Client Invoicing by Sprout Invoices < 19.9.7 - Admin+ Stored Cross-Site Scripting

Published

2024-06-21

Title

Simple Video Directory < 1.4.4 - Contributor+ Stored XSS