Kibokolabs
Kibokolabs Chained Quiz: vulnerabilidades y CVE
Kibokolabs Chained Quiz tiene 22 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE22
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-10493 | Media (5.3) | 0.92% | — | 18 sept 2025 | The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key.… |
| CVE-2025-24701 | Media (4.4) | 0.33% | — | 24 ene 2025 | Server-Side Request Forgery (SSRF) vulnerability in Bob Chained Quiz chained-quiz allows Server Side Request Forgery.This issue affects Chained Quiz: from n/a through <= 1.3.2.9. |
| CVE-2024-37921 | Media (5.3) | 0.38% | — | 1 nov 2024 | Missing Authorization vulnerability in Kiboko Labs Chained Quiz allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chained Quiz: from n/a through 1.3.2.8. |
| CVE-2024-37446 | Media (4.8) | 0.26% | — | 21 jul 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Chained Quiz allows Stored XSS.This issue affects Chained Quiz: from n/a through 1.3.2.8. |
| CVE-2023-25027 | Media (4.8) | 0.39% | — | 7 abr 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions. |
| CVE-2022-4220 | Media (4.3) | 0.42% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the list_questions() function. This makes it… |
| CVE-2022-4219 | Media (4.3) | 0.42% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the manage() function. This makes it possible for… |
| CVE-2022-4218 | Media (4.3) | 0.45% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing nonce validation on the list_quizzes() function. This makes it possible… |
| CVE-2022-4217 | Media (4.8) | 0.69% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping. This… |
| CVE-2022-4216 | Media (4.8) | 0.69% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping.… |
| CVE-2022-4215 | Media (6.1) | 0.94% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.3 due to insufficient input… |
| CVE-2022-4214 | Media (6.1) | 0.83% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.3 due to insufficient input… |
| CVE-2022-4213 | Media (6.1) | 0.69% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dn' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2.2 due to insufficient input… |
| CVE-2022-4212 | Media (6.1) | 0.88% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ipf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitization… |
| CVE-2022-4211 | Media (6.1) | 0.88% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'emailf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input… |
| CVE-2022-4210 | Media (6.1) | 0.88% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dnf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input sanitization… |
| CVE-2022-4209 | Media (6.1) | 0.88% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pointsf' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input… |
| CVE-2022-4208 | Media (6.1) | 0.88% | — | 2 dic 2022 | The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the 'chainedquiz_list' page in versions up to, and including, 1.3.2 due to insufficient input… |
| CVE-2021-24690 | Media (5.4) | 0.62% | — | 11 oct 2021 | The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings. |
| CVE-2018-14502 | Crítica (9.8) | 2.7% | — | 10 mar 2020 | controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. |
| CVE-2020-7104 | Media (6.1) | 1.6% | — | 17 ene 2020 | The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter. |
| CVE-2016-10892 | Media (6.1) | 0.92% | — | 20 ago 2019 | The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. |