CVE-2024-37921 – Chained Quiz <= 1.3.2.8 - Missing Authorization

https://notcve.org/view.php?id=CVE-2024-37921

The Chained Quiz plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the finalize() function in all versions up to, and including, 1.3.2.8. This makes it possible for unauthenticated attackers to answer quizzes that require logging in. • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •