Vulnerabilities > Mtouch Quiz Project > Mtouch Quiz > 3.0.7
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-20 | CVE-2015-9389 | Cross-site Scripting vulnerability in Mtouch Quiz Project Mtouch Quiz The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name. | 3.5 |
| 2019-09-20 | CVE-2015-9388 | Cross-Site Request Forgery (CSRF) vulnerability in Mtouch Quiz Project Mtouch Quiz The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS. | 4.3 |
| 2019-09-20 | CVE-2015-9387 | Cross-Site Request Forgery (CSRF) vulnerability in Mtouch Quiz Project Mtouch Quiz The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF. | 4.3 |
| 2019-09-20 | CVE-2015-9386 | Cross-site Scripting vulnerability in Mtouch Quiz Project Mtouch Quiz The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation. | 4.3 |