Unrated severityNVD Advisory· Published Dec 30, 2010· Updated Jun 16, 2026

CVE-2010-4630

Description

Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Affected products

Fubra/Wp Survey And Quiz Tool
cpe:2.3:a:fubra:wp-survey-and-quiz-tool:1.2.1:*:*:*:*:*:*:*
WordPress/WP Survey And Quiz Toolllm-create
Range: =1.2.1

Patches

Vulnerability mechanics

References

www.johnleitch.net/Vulnerabilities/WordPress.Survery.And.Quiz.Tool.1.2.1.Reflected.Cross-site.Scripting/57nvdExploit
secunia.com/advisories/42196nvdVendor Advisory
osvdb.org/69074nvd
packetstormsecurity.org/1011-exploits/wpsurvey-xss.txtnvd
exchange.xforce.ibmcloud.com/vulnerabilities/63056nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000