cleantalk
Vulnerabilities and Security Researches

Quiz Maker, CVE-2023-2571

CVE, Research URL

CVE-2023-2571

Application

Quiz Maker

Published on
Jun 05, 2023
Research Description
The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected versions
Min -, max 6.4.2.7.
Status
vulnerable