← CVE Intelligence

CVE-2023-5943

Wp-Adv-Quiz < 1.0.3 - Admin+ Stored XSS PUBLISHED

Description (CNA)

The Wp-Adv-Quiz WordPress plugin before 1.0.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / Wp-Adv-Quizaffected 0 before 1.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.