Vulnerability Name:

CVE-2024-4256

Assigned:2024-04-27
Published:2024-04-27
Updated:2026-06-17
Summary:A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /public/index.php/Qbank/editCategory of the component Category Page. The manipulation of the argument category_name with the input ><script>alert('XSS')</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262148.
Note: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS v40 Severity:
CVSS v3.x Severity:4.8 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): High
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
2.4 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): High
User Interaction (UI): Required
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:3.3 Low (CCN CVSS v2 Vector: AV:N/AC:L/Au:M/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Multiple_Instances
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-79
References:Source: MITRE
Type: CNA
CVE-2024-4256

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Source: af854a3a-2127-422b-91ae-364da2661108
Type: UNKNOWN
af854a3a-2127-422b-91ae-364da2661108

Source: cna@vuldb.com
Type: UNKNOWN
cna@vuldb.com

Vulnerable Configuration:Configuration 1:
  • cpe:2.3:a:techkshetrainfo:savsoft_quiz:6.0:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    techkshetrainfo savsoft quiz 6.0