Expresstech

Quiz And Survey Master

60 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-15963

  • EPSS 0.27%
  • Veröffentlicht 16.08.2026 04:24:55
  • Zuletzt bearbeitet 20.08.2026 12:48:10

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in all versions up to, and including, 11.2.1 due to insufficient escaping on the user supplied...

6.4

CVE-2026-11780

  • EPSS 0.31%
  • Veröffentlicht 16.08.2026 04:24:53
  • Zuletzt bearbeitet 20.08.2026 12:48:10

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'question_title' parameter in all versions up to, and including, 11.2.1 due to insufficient input sanitization and...

8.5

CVE-2026-65454

  • EPSS 0.26%
  • Veröffentlicht 23.07.2026 11:18:36
  • Zuletzt bearbeitet 23.07.2026 16:17:50

Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.

6.5

CVE-2026-13767

  • EPSS 0.25%
  • Veröffentlicht 16.07.2026 07:51:01
  • Zuletzt bearbeitet 16.07.2026 16:19:00

The Quiz Master Next plugin for WordPress is vulnerable to SQL Injection via stored quiz page data in versions up to, and including, 11.2.0. This is due to insufficient escaping on the user-supplied 'pages' parameter persisted by the qsm_ajax_save_pa...

4.3

CVE-2026-9230

  • EPSS 0.3%
  • Veröffentlicht 03.07.2026 06:50:11
  • Zuletzt bearbeitet 06.07.2026 18:02:49

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perfo...

4.3

CVE-2026-9233

  • EPSS 0.27%
  • Veröffentlicht 27.06.2026 06:50:57
  • Zuletzt bearbeitet 29.06.2026 20:17:41

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perfo...

7.1

CVE-2026-48867

  • EPSS 0.18%
  • Veröffentlicht 15.06.2026 20:18:55
  • Zuletzt bearbeitet 15.06.2026 21:24:32

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.

7.1

CVE-2026-40787

  • EPSS 0.18%
  • Veröffentlicht 15.06.2026 20:18:23
  • Zuletzt bearbeitet 15.06.2026 21:24:32

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.0.0 versions.

4.9

CVE-2026-6448

  • EPSS 0.35%
  • Veröffentlicht 05.06.2026 23:28:27
  • Zuletzt bearbeitet 23.07.2026 07:10:00

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up to, and including, 11.1.2 due to insufficient escaping on the user supplie...

5.3

CVE-2026-5797

  • EPSS 0.52%
  • Veröffentlicht 17.04.2026 06:16:30
  • Zuletzt bearbeitet 22.04.2026 20:22:50

The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and including 11.1.0. This is due to insufficient input sanitization and the execution of do_shortcode() on user-submitted quiz answer te...