VYPR

Quiz Maker by AYS

by WordPress

CVEs (1)

  • CVE-2026-6817MedMay 2, 2026
    risk 0.31cvss 5.8epss 0.00

    The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' parameter in all versions up to, and including, 6.7.1.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…