Vulnerabilities > Kibokolabs > Chained Quiz
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-02 | CVE-2022-4216 | Unspecified vulnerability in Kibokolabs Chained Quiz The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping. | 4.8 |
| 2022-12-02 | CVE-2022-4217 | Unspecified vulnerability in Kibokolabs Chained Quiz The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versions up to, and including, 1.3.2.2 due to insufficient input sanitization and output escaping. | 4.8 |
| 2022-12-02 | CVE-2022-4218 | Unspecified vulnerability in Kibokolabs Chained Quiz The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. | 4.3 |
| 2022-12-02 | CVE-2022-4219 | Unspecified vulnerability in Kibokolabs Chained Quiz The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. | 4.3 |
| 2022-12-02 | CVE-2022-4220 | Unspecified vulnerability in Kibokolabs Chained Quiz The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. | 4.3 |
| 2021-10-11 | CVE-2021-24690 | Cross-site Scripting vulnerability in Kibokolabs Chained Quiz The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings. | 3.5 |
| 2020-03-10 | CVE-2018-14502 | SQL Injection vulnerability in Kibokolabs Chained Quiz controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters. | 7.5 |
| 2020-01-17 | CVE-2020-7104 | Cross-site Scripting vulnerability in Kibokolabs Chained Quiz 1.1.8.1 The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter. | 4.3 |
| 2019-08-20 | CVE-2016-10892 | Cross-site Scripting vulnerability in Kibokolabs Chained Quiz The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues. | 4.3 |