CVE-2025-12016 | qnotsquiz Plugin up to 1.0.0 on WordPress qnotsquiz_custom_start_text cross site scripting

October 24, 2025 Yanac

A vulnerability, which was classified as problematic, was found in qnotsquiz Plugin up to 1.0.0 on WordPress. This affects an unknown function. Such manipulation of the argument qnotsquiz_custom_start_text leads to cross site scripting.

This vulnerability is traded as CVE-2025-12016. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More