Threat Entry Updated 2025-07-25

CVE-2025-6174 - Online Quizzes And Flashcards Plugin

The Qwizcards | online quizzes and flashcards WordPress plugin through 3.9.4 does not sanitise and escape the "_stylesheet" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or any other user.

PLUGIN Online Quizzes And Flashcards

CVE-2025-6174

MEDIUM CVSS 6.1 2025-07-23

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2021-24706 - Online Quizzes And Flashcards Plugin

The Qwizcards – online quizzes and flashcards WordPress plugin before 3.62 does not properly sanitize and escape some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

PLUGIN Online Quizzes And Flashcards

CVE-2021-24706

MEDIUM CVSS 4.8 2021-11-08

Risk Score

Open Full Technical Breakdown