Security Advisory

CVE-2023-6166

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-26 18:33:02

Last updated 2024-08-02 08:21:17

Assigner WPScan

State PUBLISHED

Description

The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

← Browse all CVEs View on cve.org ↗