medium5.4
CVE-2018-17138
The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field.
Impact
The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nickelpro | Jibu Pro | through 1.7 |