Approved changes feed: RSS · Atom

cpe:2.3:a:savsofts:savsoft_quiz:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSavsofts (3e63a68c-0c75-5d27-a785-b33c5ab42c70)
ProductSavsoft Quiz (fe3052f0-c742-51e1-b62d-b5cf22632dbb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47962 vulnerable 2026-06-08 05:38:07.997472 Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User Settings
MEDIUM (6.4)
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScript code. Attackers can inject script payloads into user profile fields at the edit_user endpoint, which execute in the browsers of users viewing the affected profile after submission.
Published: 2026-05-15T18:36:28.936Z
Updated: 2026-05-24T01:37:15.139Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.