Read the docs

Harmonic Design

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Harmonic Design records in CISA KEV

No Harmonic Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hd Quiz 3 records MEDIUM

Records

3 records in Hd Quiz · all components

TI-2024-12425 CVE-2024-13383 · GHSA-r5wg-fxw7-6v36

HD Quiz < 2.0.0 - Editor+ Stored XSS

Priority MEDIUM 55

The HD Quiz WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.0.0 CWE-79
TI-2024-14762 CVE-2024-22161 · GHSA-h4gx-v8fr-h545

WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-01-31 No fix listed CWE-79
TI-2021-06856 CVE-2021-24571 · GHSA-7hqj-44cw-26jp

HD Quiz < 1.8.4 - Authenticated Stored XSS

Priority LOW 25

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-23 Fixed in 1.8.4 CWE-79
Open these records in search →