CVE-2021-24690: Chained Quiz < 1.2.7.2 - Authenticated Stored Cross Site Scripting
First published: Mon Oct 11 2021(Updated: )
The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kibokolabs Chained Quiz Wordpress | <1.2.7.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-24690?
CVE-2021-24690 is a vulnerability in the Chained Quiz WordPress plugin before version 1.2.7.2 that allows for improper input sanitization or escaping in the plugin's settings.
How does CVE-2021-24690 affect the Chained Quiz WordPress plugin?
CVE-2021-24690 affects the Chained Quiz WordPress plugin before version 1.2.7.2 by not properly sanitizing or escaping inputs in the plugin's settings, potentially leading to security vulnerabilities.
What is the severity of CVE-2021-24690?
CVE-2021-24690 has a severity rating of medium with a CVSS score of 5.4.
How do I fix CVE-2021-24690 in the Chained Quiz WordPress plugin?
To fix CVE-2021-24690, it is recommended to update the Chained Quiz WordPress plugin to version 1.2.7.2 or later, which includes proper input sanitization and escaping.
Where can I find more information about CVE-2021-24690?
More information about CVE-2021-24690 can be found at https://wpscan.com/vulnerability/b2f473b4-268c-48b7-95e8-0a8eeaa3fc28.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- vendor/kibokolabs
- canonical/kibokolabs chained quiz wordpress