Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

1 vulnerability found for WordPress Quiz Maker by AYS Pro Plugins

JVNDB-2024-000001

Vulnerability from jvndb - Published: 2024-01-12 13:51 - Updated:2024-03-14 12:28
Severity ?
5.0 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Summary
Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin"
Details
WordPress Plugin "WordPress Quiz Maker Plugin" provided by AYS Pro Plugins contains an improper input validation vulnerability (CWE-20). Shogo Kumamaru of LAC CyberLink Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website
To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000001.html",
  "dc:date": "2024-03-14T12:28+09:00",
  "dcterms:issued": "2024-01-12T13:51+09:00",
  "dcterms:modified": "2024-03-14T12:28+09:00",
  "description": "WordPress Plugin \"WordPress Quiz Maker Plugin\" provided by AYS Pro Plugins contains an improper input validation vulnerability (CWE-20).\r\n\r\nShogo Kumamaru of LAC CyberLink Co., Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000001.html",
  "sec:cpe": {
    "#text": "cpe:/a:ays-pro_plugins:quiz_maker",
    "@product": "WordPress Quiz Maker",
    "@vendor": "AYS Pro Plugins",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "4.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2024-000001",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN37326856/index.html",
      "@id": "JVN#37326856",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-22027",
      "@id": "CVE-2024-22027",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2024-22027",
      "@id": "CVE-2024-22027",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Improper input validation vulnerability in WordPress Plugin \"WordPress Quiz Maker Plugin\""
}