Skip to content
Sign in
7.5 High

CVE-2023-0428 The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in…

Description

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Affected products and versions

Product Affected versions Fixed in
Watu Quiz 3.3 earliest → < 3.3.8.2 3.3.8.2

Other CVEs of Watu Quiz

The 3 CVEs of Watu Quiz →
CVE-2024-2640 The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users… 6.8 Medium CVE-2023-0429 The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow… 3.5 Low
Track this CVE