Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 24
Reset filtersChained Quiz <= 1.3.2.9 - Authenticated (Admin+) Server-Side Request Forgery
Chained Quiz <= 1.3.2.8 - Missing Authorization
Chained Quiz <= 1.3.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Chained Quiz <= 1.3.2.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Chained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion
Chained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key
Chained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
Chained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying
Chained Quiz < 1.2.7.2 - Cross-Site Scripting
Chained Quiz <= 1.1.9 -Stored Cross-Site Scripting
Chained Quiz <= 1.1.8.1 - Reflected Cross-Site Scripting
Chained Quiz <= 1.0.8.2 - Unauthenticated SQL Injection
Chained Quiz Plugin < 1.0 - Cross-Site Scripting
Chained Quiz <= 0.9.8 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.