Security Advisory

CVE-2019-12516

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-13 12:19:23
Last updated 2024-08-04 23:24:38
Assigner mitre
State PUBLISHED

Description

The slickquiz plugin through 1.3.7.1 for WordPress allows SQL Injection by Subscriber users, as demonstrated by a /wp-admin/admin.php?page=slickquiz-scores&id= or /wp-admin/admin.php?page=slickquiz-edit&id= or /wp-admin/admin.php?page=slickquiz-preview&id= URI.