Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress, 212712b5-c3be-47d1-b1d4-f98585e6f472
- CVE, Research URL
- Home page URL
-
Security reports for Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress
- Published on
- -
- Research Description
- Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next] < 7.0.2 Quiz and Survey Master < 7.0.2 - Unauthenticated Arbitrary File Upload Because the plugin doesn't validate the name of the uploaded file, an unauthenticated user could upload a PHP script with a double extension, e.g., script.php.jpg, and execute it on HTTP servers running a configuration such as Apache + PHP FastCGI. Edit (WPScanTeam): This appears to be due to an incomplete fix of https://wpvulndb.com/vulnerabilities/10349
- Affected versions
-
max 7.0.2.
- Status
-
vulnerable