← All advisories

Medium severity6.1NVD Advisory· Published Jan 17, 2020· Updated Jun 17, 2026

CVE-2020-7104

CVE-2020-7104

Description

The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.

Affected products

3

Kibokolabs/Chained Quiz
cpe:2.3:a:kibokolabs:chained_quiz:1.1.8.1:*:*:*:*:wordpress:*:*
WordPress/chained-quiz plugindescription
WordPress/Chained Quizllm-fuzzy
Range: =1.1.8.1
Package: https://wordpress.org/plugins/chained-quiz

Patches

Vulnerability mechanics

References

1

wpvulndb.com/vulnerabilities/10029nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.