Reflected Cross-Site Scripting Vulnerability in Quiz Maker Plugins for WordPress

CVE-2024-10636

What is CVE-2024-10636?

The Quiz Maker plugins for WordPress, including the Business, Developer, and Agency versions, are susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject malicious web scripts into pages. The scripts execute when users are tricked into clicking on a manipulated link, posing severe security risks to website users.

References