kibokolabs Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for kibokolabs software and firmware.

← Back to All Vendors
Component: namaste\!_lms

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions....

📅 2023-04-06
CVSS 5.9 Dossier →
CVE-2023-0844 MEDIUM
Component: namaste\!_lms

The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin t...

📅 2023-03-13
CVSS 4.8 Dossier →
CVE-2023-0968 MEDIUM
Component: watu_quiz

The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions ...

📅 2023-03-03
CVSS 6.1 Dossier →
CVE-2023-0548 MEDIUM
Component: namaste\!_lms

The Namaste! LMS WordPress plugin before 2.5.9.4 does not sanitize and escape some of its settings, which could allow high-privilege users such as adm...

📅 2023-02-27
CVSS 4.8 Dossier →
CVE-2023-0543 MEDIUM
Component: arigato_autoresponder_and_newsletter

The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allow high-pri...

📅 2023-02-27
CVSS 4.8 Dossier →
CVE-2023-0429 MEDIUM
Component: watu_quiz

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin ...

📅 2023-02-21
CVSS 4.8 Dossier →
CVE-2023-0428 MEDIUM
Component: watu_quiz

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C...

📅 2023-02-21
CVSS 6.1 Dossier →
CVE-2022-4220 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing no...

📅 2022-12-02
CVSS 5.4 Dossier →
CVE-2022-4219 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing no...

📅 2022-12-02
CVSS 5.4 Dossier →
CVE-2022-4218 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.2.4. This is due to missing no...

📅 2022-12-02
CVSS 5.4 Dossier →
CVE-2022-4217 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'api_key' parameter in versions up to, and including, 1.3.2...

📅 2022-12-02
CVSS 5.5 Dossier →
CVE-2022-4216 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'facebook_appid' parameter in versions up to, and including...

📅 2022-12-02
CVSS 5.5 Dossier →
CVE-2022-4215 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date' parameter on the 'chainedquiz_list' page in versi...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4214 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter on the 'chainedquiz_list' page in version...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4213 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dn' parameter on the 'chainedquiz_list' page in version...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4212 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ipf' parameter on the 'chainedquiz_list' page in versio...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4211 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'emailf' parameter on the 'chainedquiz_list' page in ver...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4210 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dnf' parameter on the 'chainedquiz_list' page in versio...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4209 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pointsf' parameter on the 'chainedquiz_list' page in ve...

📅 2022-12-02
CVSS 6.1 Dossier →
CVE-2022-4208 MEDIUM
Component: chained_quiz

The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the 'chainedquiz_list' page in vers...

📅 2022-12-02
CVSS 6.1 Dossier →
Component: chained_quiz

The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings....

📅 2021-10-11
CVSS 5.4 Dossier →
Component: moolamojo

The MoolaMojo WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the classes parameter found in the ~/views/button-generator.html.ph...

📅 2021-09-10
CVSS 6.1 Dossier →
Component: konnichiwa

The Konnichiwa! Membership WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the plan_id parameter in the ~/views/subscriptions.htm...

📅 2021-09-09
CVSS 6.1 Dossier →
CVE-2018-14502 CRITICAL
Component: chained_quiz

controllers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows remote unauthenticated users to execute arbitrary SQL comm...

📅 2020-03-10
CVSS 9.8 Dossier →
Page 2 of 3 (63 Total Records)