Question Answer vulnerabilities

2 known vulnerabilities in Question Answer from PickPlugins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Question Answer: Deserialization of Untrusted Data

  CVE-2025-32647Apr 17, 2025PickPlugins

  Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer question-answer allows Object Injection.This issue affects Question Answer: from n/a through <= 1.2.73.

• 7.1 High severity

  Question Answer: Improper Neutralization of Input During Web Page Generation

  CVE-2025-32646Apr 17, 2025PickPlugins

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue affects Question Answer: from n/a through <= 1.2.70.