Chained Quiz < 22.214.171.124 - Authenticated Stored Cross Site Scripting
The plugin does not properly sanitize or escape inputs in the plugin's settings.
Proof of Concept
Open "Chained Quiz > Social Sharing" in the WP admin panel.
Under title field enter the payload :
Click on Save All Setting and the XSS will fire every time the Social Sharing page is loaded.