Skip to content
OpenAdvisories
Unscored CVE-2021-24571 EUVD-2021-11483GHSA-7hqj-44cw-26jp

HD Quiz < 1.8.4 - Authenticated Stored XSS

Published Aug 23, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

Affected products

VendorProductAffectedFixed
— HD Quiz 1.8.4 – < 1.8.4 1.8.4

References