CVE-2015-9388

Description

References

• wordpress.org/plugins/mtouch-quiz · Release Notes
• davidsopas.com/multiple-vulns-on-mtouch-quiz-wordpress-plugin · Exploit

mtouch quiz 的其他漏洞

• CVE-2022-2410中危 4.8The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users suc…
• CVE-2015-9389中危 5.4The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
• CVE-2015-9387中危 6.5The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
• CVE-2015-9386中危 6.1The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
• CVE-2014-100023中危 4.3Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to …