Threats tagged 'ghsa-2ff6-q4x2-f33x'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.8	CVE-2026-6817The Quiz Maker by AYS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rate_reason' Medium5.82026-05-02GCVE DatabaseCVE-2026-6817 The Quiz Maker by AYS WordPress plugin versions up to and including 6.7.1.29 contain a stored cross-site scripting (XSS) vulnerability via the 'rate_reason' parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. Report on CVE-2026-6817 Vulnerability CWE-79 #ghsa-2ff6-q4x2-f33x	GCVE Database	2026-05-02

Page 1 of 1