Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress, 2328790e-54a9-4c20-a0a3-beacb6fbae3b
- CVE, Research URL
- Home page URL
-
Security reports for Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress
- Published on
- -
- Research Description
- Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker [quiz-master-next] < 7.0.0 Quiz And Survey Master < 7.0.0 - Authenticated Stored Cross-Site Scripting (XSS) A stored cross-site scripting vulnerability exists in Quiz and Survey Master plugin (version 6.4.12 & below). The vulnerability exists in quiz creation module where a user with low privileges is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of text editor and correct answers parameter.
- Affected versions
-
max 7.0.0.
- Status
-
vulnerable