Skip to content
OpenAdvisories

Product · q2a

question2answer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-64829

    Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow

    Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode fiel…

    q2a question2answer