CVE-2021-24571
Assigner: WPScan
Published: 2021-08-23T11:10:17
State: PUBLISHED
affected: product: HD Quiz
vendor: Unknown
versions: lessThan: 1.8.4
status: affected
version: 1.8.4
versionType: custom
credits: value: Authenticated Stored XSS
descriptions: value: The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: HD Quiz < 1.8.4 - Authenticated Stored XSS
x_generator: WPScan CVE Generator