CVE-2023-2571
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jun 5, 2023
Updated: Jan 8, 2025
CWE ID 94
Summary
CVE-2023-2571 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Quiz Maker WordPress plugin before version 6.4.2.7. Malicious scripts can be injected into parameters, which are then output without proper escaping. This issue poses a significant risk, particularly to high-privilege users like administrators, who could be targeted for unauthorized access or data theft upon visiting a specially crafted malicious link.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Ruckus Wireless Inc