The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-10-11T10:45:42
Updated: 2024-08-03T19:42:16.107Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24691
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-10-11T11:15:09.163
Modified: 2024-11-21T05:53:34.487
Link: CVE-2021-24691
Redhat
No data.