Product Referenceproduct
https://github.com/savsofts/savsoftquiz_v5 CVE-2021-47962
MEDIUM
Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User Settings
Record summary
CVE-2021-47962 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
Savsoft Quiz 5.0 contains a persistent cross-site scripting vulnerability in the user account settings page that allows authenticated attackers to inject malicious HTML and JavaScript code. Attackers can inject script payloads into user profile fields at the edit_user endpoint, which execute in the browsers of users viewing the affected profile after submission.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 15, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Savsoft QuizBrowse savsofts / Savsoft Quiz | CVE List | 5.0 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBSavsoft Quiz 5 - 'User Account Settings' Persistent Cross-Site ScriptingExploitDB exploitby striderNot analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-47962 Official Product Homepageproduct
https://savsoftquiz.com/ ExploitDB-49825exploit
https://www.exploit-db.com/exploits/49825 VulnCheck Advisory: Savsoft Quiz 5.0 Persistent Cross-Site Scripting via User SettingsThird-party advisory
https://www.vulncheck.com/advisories/savsoft-quiz-persistent-cross-site-scripting-via-user-settings