Descripción
A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quiz_question results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVSS 3.5EPSS 0.23900000000000002%Riesgo 0.36
Ver fuente- Publicación
- 2026-03-27 20:16:38
- Versiones afectadas
- <=1.0
- Tipo
- Installed app
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N