Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

mtouch_quiz_project / mtouch_quiz CVEs

Beta · best-effort

7 CVEs tagged to mtouch_quiz_project / mtouch_quiz — 0 Critical, 1 High, 6 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to mtouch_quiz_project vendor archive

CVE-2022-2410

Published Aug 8, 2022

The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9389

Published Sep 20, 2019

The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9388

Published Sep 20, 2019

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9387

Published Sep 20, 2019

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9386

Published Sep 20, 2019

The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-100023

Published Jan 13, 2015

Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2014-100022

Published Jan 13, 2015

SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-ad…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-7 of 7 CVEsPage 1 of 1