Vulnerabilities

TI-2023-25942 CVE-2023-47834 · GHSA-c75g-f6fm-c222

WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master plugin <= 8.1.13 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-11-22 No fix listed CWE-79

TI-2021-14958 CVE-2021-36865 · GHSA-qmgp-3m36-hh24

WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability

LOW 21

Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the content of the quiz.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00514 Published 2022-09-30 No fix listed CWE-639

TI-2019-06995 CVE-2019-9575 · GHSA-wmv8-qvh8-5v54

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.

LOW 30

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01608 Published 2019-03-05 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)

WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.