Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-1078
HistoryFeb 07, 2024 - 8:15 a.m.

Design/Logic Flaw

2024-02-0708:15:00
PRIOn knowledge base
www.prio-n.com
1
quiz maker
wordpress
unauthorized access

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ays_quick_start() and add_question_rows() functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to create arbitrary quizzes.

CPENameOperatorVersion
quiz_makerlt6.5.2.5

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

Related for PRION:CVE-2024-1078