Aller au contenu
Se connecter
7.5 Élevée

CVE-2023-0428 The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in…

Description

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

Produits et versions touchés

Produit Versions touchées Corrigé en
Watu Quiz 3.3 premières → < 3.3.8.2 3.3.8.2

Autres CVE de Watu Quiz

Les 3 CVE de Watu Quiz →
CVE-2024-2640 The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users… 6.8 Moyenne CVE-2023-0429 The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow… 3.5 Faible
Suivre cette CVE