Vulnerabilities

TI-2025-31948 CVE-2025-50035 · GHSA-vqj3-44f5-gxgp

WordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through <= 3.1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00251 Published 2025-06-20 No fix listed CWE-79

TI-2025-18794 CVE-2025-25125 · GHSA-mr23-8wf2-r562

WordPress Fyrebox Quizzes plugin <= 3.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through <= 3.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00155 Published 2025-02-07 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

WordPress Fyrebox Quizzes plugin <= 3.1 - CSRF to Stored XSS vulnerability