Vulnerabilities

TI-2024-22739 CVE-2024-34401 · GHSA-wc23-543f-rmp8

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.

LOW 27

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00411 Published 2024-05-03 No fix listed CWE-79

TI-2024-03961 CVE-2024-4256 · GHSA-mr8x-cppj-5j9h

Techkshetra Info Solutions Savsoft Quiz Category Page editCategory cross site scripting

LOW 23

A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00519 Published 2024-04-27 No fix listed CWE-79

TI-2020-17951 CVE-2020-35349 · GHSA-vhf3-r7x4-jc34

Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page).

LOW 23

Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00611 Published 2020-12-26 No fix listed CWE-79

TI-2020-16686 CVE-2020-27515 · GHSA-9j28-98vj-rxx9

A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers…

LOW 31

A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01815 Published 2020-12-26 No fix listed CWE-79

TI-2020-15083 CVE-2020-24609 · GHSA-5c5h-fj8x-wmx5

TechKshetra Info Solutions Pvt.

LOW 39

TechKshetra Info Solutions Pvt.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.09815 Published 2020-08-25 No fix listed CWE-79

Vulnerabilities

Filters

Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.

Techkshetra Info Solutions Savsoft Quiz Category Page editCategory cross site scripting

Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page).

A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers…

TechKshetra Info Solutions Pvt.