CVE-2022-2410
Published Aug 8, 2022The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…
Vendor archive
mtouch_quiz_project CVEs
Beta · best-effort7 CVEs tagged to vendor mtouch_quiz_project — 0 Critical, 1 High, 6 Medium, 0 Low, 0 Unrated.
CVE-2015-9389
Published Sep 20, 2019The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
CVE-2015-9388
Published Sep 20, 2019The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
CVE-2015-9387
Published Sep 20, 2019The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
CVE-2015-9386
Published Sep 20, 2019The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
CVE-2014-100023
Published Jan 13, 2015Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via…
CVE-2014-100022
Published Jan 13, 2015SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-ad…
Showing 1-7 of 7 CVEsPage 1 of 1