Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Harmonic Design Component: Hd Quiz Clear all filters
TI-2024-12425 CVE-2024-13383 · GHSA-r5wg-fxw7-6v36

HD Quiz < 2.0.0 - Editor+ Stored XSS

Priority MEDIUM 55

The HD Quiz WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.0.0 CWE-79
TI-2024-14762 CVE-2024-22161 · GHSA-h4gx-v8fr-h545

WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-01-31 No fix listed CWE-79
TI-2021-06856 CVE-2021-24571 · GHSA-7hqj-44cw-26jp

HD Quiz < 1.8.4 - Authenticated Stored XSS

Priority LOW 25

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-23 Fixed in 1.8.4 CWE-79