CVE-2018-14502

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-03-10

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Chained Quiz (Kibokolabs)

References

• https://wordpress.org/plugins/chained-quiz/#developers
• https://wpvulndb.com/vulnerabilities/9112