CVE-2018-14502 - controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters

Back Back to CVE browser

CRITICAL

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters

Published Mar 10, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.69%

Description

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL commands via the 'answer' and 'answers' parameters.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://wordpress.org/plugins/chained-quiz/#developers
x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/9112
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://wordpress.org/plugins/chained-quiz/#developers		x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/9112		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 10, 2020

Updated Aug 5, 2024

Reserved Jul 22, 2018

Link CVE-2018-14502

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-14502

Red Hat

Severity n/a

Public date n/a

Links CVE-2018-14502