VendorsKiboko Labschained_quizany version
Vulnerabilities

Kiboko Labs Chained Quiz any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2018-14502
controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.
Published 2020-03-10 · Modified
9.8EPSS 0.027
CVE-2016-10892
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
Published 2019-08-20 · Modified
6.1EPSS 0.009
CVE-2022-4215
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
Published 2022-12-02 · Modified
6.1EPSS 0.009
CVE-2022-4208
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4209
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4210
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4211
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4212
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4214
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
Published 2022-12-02 · Modified
6.1EPSS 0.008
CVE-2022-4213
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
Published 2022-12-02 · Modified
6.1EPSS 0.007
CVE-2023-25027
WordPress Chained Quiz Plugin <= 1.3.2.5 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-07 · Modified
5.9EPSS 0.004
CVE-2024-37446
WordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-21 · Modified
5.9EPSS 0.003
CVE-2022-4216
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID
Published 2022-12-02 · Modified
5.5EPSS 0.007
CVE-2022-4217
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key
Published 2022-12-02 · Modified
5.5EPSS 0.007
CVE-2021-24690
Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
Published 2021-10-11 · Modified
5.4EPSS 0.006
CVE-2022-4218
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying
Published 2022-12-02 · Modified
5.4EPSS 0.004
CVE-2022-4219
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion
Published 2022-12-02 · Modified
5.4EPSS 0.004
CVE-2022-4220
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
Published 2022-12-02 · Modified
5.4EPSS 0.004