Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Ma…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00307 Published 2026-02-20 No fix listed CWE-89
Priority LOW 19

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862
Priority LOW 30

Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Qui…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00365 Published 2026-02-19 No fix listed CWE-639
Priority LOW 19

Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2026-01-22 No fix listed CWE-862
Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Ma…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.003 Published 2025-08-14 No fix listed CWE-89
Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue af…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00557 Published 2024-10-05 No fix listed CWE-22