Lucene search
WPScanCVELIST:CVE-2021-24701HistoryNov 08, 2021 - 5:35 p.m.
CVE-2021-24701 Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting
2021-11-0817:35:09
CWE-79
WPScan
www.cve.org
3
cross-site scripting
wordpress
quiz tool lite
EPSS
0.001
Percentile
24.8%
The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CNA Affected
[
{
"product": "Quiz Tool Lite",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "2.3.15",
"status": "affected",
"version": "2.3.15",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site scripting
2021-11-08 18:15:00
wpvulndb
wpvulndb
Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting
2021-10-11 00:00:00
cve
cve
CVE-2021-24701
2021-11-08 18:15:09
patchstack
patchstack
nvd
nvd
CVE-2021-24701
2021-11-08 18:15:09
wpexploit
wpexploit
Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting
2021-10-11 00:00:00