Expresstech

Quiz And Survey Master

54 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2021-36898

  • EPSS 0.82%
  • Veröffentlicht 28.10.2022 18:15:10
  • Zuletzt bearbeitet 28.04.2026 19:18:18

Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.

5.4

CVE-2021-36864

  • EPSS 0.41%
  • Veröffentlicht 28.10.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 06:14:12

Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.

5.4

CVE-2021-36863

  • EPSS 0.44%
  • Veröffentlicht 28.10.2022 16:15:14
  • Zuletzt bearbeitet 21.11.2024 06:14:12

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.

5.4

CVE-2022-0182

  • EPSS 0.97%
  • Veröffentlicht 17.01.2022 10:15:08
  • Zuletzt bearbeitet 21.11.2024 06:38:05

Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website that uses Quiz And Survey Master.

6.1

CVE-2022-0181

  • EPSS 1.28%
  • Veröffentlicht 17.01.2022 10:15:08
  • Zuletzt bearbeitet 21.11.2024 06:38:05

Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors.

8.8

CVE-2022-0180

  • EPSS 0.65%
  • Veröffentlicht 17.01.2022 10:15:08
  • Zuletzt bearbeitet 21.11.2024 06:38:05

Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.

4.8

CVE-2021-24691

Exploit
  • EPSS 0.6%
  • Veröffentlicht 11.10.2021 11:15:09
  • Zuletzt bearbeitet 21.11.2024 05:53:34

The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capabi...

6.1

CVE-2021-20792

  • EPSS 3.52%
  • Veröffentlicht 18.08.2021 06:15:07
  • Zuletzt bearbeitet 21.11.2024 05:47:11

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors.

6.1

CVE-2021-24368

Exploit
  • EPSS 0.83%
  • Veröffentlicht 20.06.2021 13:15:07
  • Zuletzt bearbeitet 21.11.2024 05:52:55

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This cou...

8.8

CVE-2021-24221

Exploit
  • EPSS 1.89%
  • Veröffentlicht 12.04.2021 14:15:15
  • Zuletzt bearbeitet 21.11.2024 05:52:37

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result] shortcode without id attribute, concatenating it in a SQL statement and lead...