CQ
Product
Chained Quiz
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 19Low 0
Watch
Add Chained Quiz to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14502 | 9.8 | Mar 10 | controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and… Affected: before 1.0.9 |
| CVE-2022-4212 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf Affected: through 1.3.2 |
| CVE-2022-4211 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf Affected: through 1.3.2 |
| CVE-2022-4210 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf Affected: through 1.3.2 |
| CVE-2022-4209 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf Affected: through 1.3.2 |
| CVE-2022-4208 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef Affected: through 1.3.2 |
| CVE-2022-4213 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn Affected: through 1.3.2.2 |
| CVE-2022-4214 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip Affected: through 1.3.2.3 |
| CVE-2022-4215 | 6.1 | Dec 2 | Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date Affected: through 1.3.2.3 |
| CVE-2020-7104 | 6.1 | Jan 17 | The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter Affected: 1.1.8.1 |
| CVE-2016-10892 | 6.1 | Aug 20 | The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues Affected: before 1.0 |
| CVE-2021-24690 | 5.4 | Oct 11 | Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting Affected: before 1.2.7.2 |
| CVE-2024-37921 | 5.3 | Nov 1 | WordPress Chained Quiz plugin <= 1.3.2.8 - Broken Access Control vulnerability Affected: through 1.3.2.8 |
| CVE-2024-37446 | 4.8 | Jul 21 | WordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability Affected: before 1.3.2.9 |
| CVE-2023-25027 | 4.8 | Apr 7 | WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.3.2.5 |
| CVE-2022-4216 | 4.8 | Dec 2 | Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID Affected: through 1.3.2.2 |
| CVE-2022-4217 | 4.8 | Dec 2 | Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key Affected: through 1.3.2.2 |
| CVE-2022-4220 | 4.3 | Dec 2 | Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion Affected: through 1.3.2.4 |
| CVE-2022-4219 | 4.3 | Dec 2 | Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion Affected: through 1.3.2.4 |
| CVE-2022-4218 | 4.3 | Dec 2 | Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying Affected: through 1.3.2.4 |
Showing 20