Description
ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.
Remediation
References
Related Vulnerabilities
WordPress Plugin Fungif The Awesome GIFs Cross-Site Scripting (2.0)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46243)
WordPress Plugin Spiffy Calendar SQL Injection (4.9.11)
WordPress Plugin Simple:Press-WordPress Forum Arbitrary File Upload (6.6.0)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-0541)