Reflected Cross-Site Scripting Vulnerability in Chained Quiz Plugin for WordPress

CVE-2022-4215

What is CVE-2022-4215?

The Chained Quiz plugin for WordPress suffers from a Reflected Cross-Site Scripting flaw, primarily affecting the 'date' parameter on the 'chainedquiz_list' page. This issue arises from inadequate input sanitization and output escaping in versions up to and including 1.3.2.3. Consequently, unauthenticated attackers can exploit this vulnerability to inject malicious scripts into web pages. If a user is tricked into interacting with a crafted link, the injected scripts could execute in their browser context, potentially compromising user data or account security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References