CVE-2026-110379: WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Maker: from n/a through 6.7.1.91.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Quiz Maker pluginto a version that resolves this vulnerability.Fixed in 6.7.1.92
Event History
Frequently Asked Questions
Which installations should be treated as affected?
Quiz Maker installations running version 6.7.1.91 or earlier should be treated as affected. The available information does not identify a fixed version.
What conditions are required for exploitation?
The issue is remotely reachable and requires no attacker privileges, with low attack complexity. Exploitation requires user interaction, consistent with a reflected XSS attack.
What is the likely security impact if exploitation succeeds?
The severity data indicates low potential impact to confidentiality, integrity, and availability, and that the vulnerable component can affect a different security scope.