Read the docs

prasunsen

Records84All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

prasunsen records in CISA KEV

No prasunsen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chained Quiz 19 records MEDIUM Arigato Autoresponder And Newsletter 16 records MEDIUM Watu Quiz 12 records HIGH Namaste! Lms 8 records HIGH Hostel 5 records MEDIUM Konnichiwa 1 record LOW Moolamojo 1 record LOW Watupro 1 record LOW

Records

19 records in Chained Quiz · all components

TI-2022-03861 CVE-2022-4217 · GHSA-f4h7-2jxm-q54f

Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key

Priority MEDIUM 58

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.0071 Published 2022-12-02 No fix listed CWE-79
TI-2022-03859 CVE-2022-4215 · GHSA-49rm-fhc6-pjjq

Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.3 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00975 Published 2022-12-02 No fix listed CWE-79
TI-2022-03858 CVE-2022-4214 · GHSA-wrfm-8hcf-4447

Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.3 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00861 Published 2022-12-02 No fix listed CWE-79
TI-2022-03856 CVE-2022-4212 · GHSA-43vw-6gqx-ppjf

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ipf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2022-12-02 No fix listed CWE-79
TI-2022-03855 CVE-2022-4211 · GHSA-73h9-qpgf-gc84

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'emailf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2022-12-02 No fix listed CWE-79
TI-2022-03854 CVE-2022-4210 · GHSA-2m2j-5m2v-5938

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dnf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2022-12-02 No fix listed CWE-79
TI-2022-03853 CVE-2022-4209 · GHSA-hcrg-vfgm-35mf

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pointsf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2022-12-02 No fix listed CWE-79
TI-2022-03852 CVE-2022-4208 · GHSA-r959-w7rj-vg48

Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef

Priority LOW 29

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitizatio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2022-12-02 No fix listed CWE-79
TI-2022-03857 CVE-2022-4213 · GHSA-px6r-rj6g-428q

Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn

Priority LOW 28

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dn' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.2 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00718 Published 2022-12-02 No fix listed CWE-79
TI-2024-24950 CVE-2024-37446 · GHSA-8976-mgrg-7rqg

WordPress Chained Quiz plugin <= 1.3.2.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Chained Quiz allows Stored XSS.This issue affects Chained Quiz: from n/a through 1.3.2.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0026 Published 2024-07-21 No fix listed CWE-79
TI-2022-03860 CVE-2022-4216 · GHSA-x668-cjp3-p737

Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID

Priority LOW 26

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.0071 Published 2022-12-02 No fix listed CWE-79
Open these records in search →