WordPress Plugin Vulnerabilities
Qwiz Online Quizzes And Flashcards <= 3.36 - Unauthenticated Reflected Cross Site Scripting
Description
The qname, i_qwiz, session_id and username parameters passed to the registration_complete.php file are affected by XSS issues.
Plugin has been closed while the issue is being fixed.
Proof of Concept
Affects Plugins
Fixed in 3.37 References
Classification
Type
XSS
OWASP top 10
CWE
Miscellaneous
Original Researcher
Ricardo Sanchez
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-09-07 (about 6 years ago)
Added
2019-09-10 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)
WPScan 