SZB-f2731f604b
EUVD lists unauthenticated XSS in Chained Quiz up to 1.4.1
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Bob
- Product
- Chained Quiz
- First seen
Summary
The EUVD listing, shared via a Mastodon post, describes an unauthenticated cross-site scripting flaw in Chained Quiz versions up to 1.4.1. It is scored 7.1 (CVSS v3.1) and attributed to vendor Bob.
If you use Bob
Check whether Chained Quiz is installed and which version is running
Update to a fixed version from the vendor once one is released
If no fix is available, disable the quiz plugin on public pages
What the sources say 1
· Mastodon: “Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.” Source