The Quiz Tool Lite WordPress plugin through 2.3.15 does not sanitize multiple input fields used when creating or managing quizzes and in other setting options, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-11-08T17:35:09
Updated: 2024-08-03T19:42:16.217Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24701
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-11-08T18:15:09.220
Modified: 2024-11-21T05:53:35.707
Link: CVE-2021-24701
Redhat
No data.