Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-50035 EUVD-2025-28360GHSA-vqj3-44f5-gxgp

WordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Published Jun 20, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through <= 3.1.

Affected products

VendorProductAffectedFixed
CyrilG Fyrebox Quizzes ≤ 3.1 —

References