CVE-2014-100023

Currently unrated

Key Information:

Vendor
Wordpress
Status
Mtouch Quiz
Vendor
CVE Published:
13 January 2015

Summary

Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter to wp-admin/edit.php.

References

http://secunia.com/advisories/57491
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/91949
vdb-entryx_refsource_XF
https://wordpress.org/plugins/mtouch-quiz/changelog/
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.