CVE-2018-17140: Vms-Studio Quizlord

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a ql_insert action to wp-admin/admin.php.

Affected products

• Vms-Studio Quizlord: up to and including 2.0

Published 2018-09-17. Last modified 2026-06-17.