1 results (0.001 seconds)
CVSS: 5.3EPSS: %CPEs: 1EXPL: 0
CVE-2024-37921 – Chained Quiz <= 1.3.2.8 - Missing Authorization
https://notcve.org/view.php?id=CVE-2024-37921
The Chained Quiz plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the finalize() function in all versions up to, and including, 1.3.2.8. This makes it possible for unauthenticated attackers to answer quizzes that require logging in. • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •