CVE-2022-4032

🗓️ 29 Nov 2022 20:23:15Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 62 Views

The Quiz and Survey Master WordPress plugin (up to v8.0.4) is vulnerable to iFrame Injection via 'question[id]' parameter due to insufficient input sanitization and output escaping

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-4032	30 Nov 202200:29	–	circl
CNNVD	WordPress plugin Quiz and Survey Master 跨站脚本漏洞	29 Nov 202200:00	–	cnnvd
CNVD	WordPress Quiz and Survey Master plugin iFrame Injection Vulnerability	1 Dec 202200:00	–	cnvd
Cvelist	CVE-2022-4032 Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer	29 Nov 202220:23	–	cvelist
EUVD	EUVD-2022-51411	3 Oct 202520:07	–	euvd
NVD	CVE-2022-4032	29 Nov 202221:15	–	nvd
OSV	CVE-2022-4032	29 Nov 202221:15	–	osv
Prion	Input validation	29 Nov 202221:15	–	prion
Positive Technologies	PT-2022-25346 · WordPress · Quiz/Survey Master	29 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-4032	5 Feb 202520:23	–	redhatcve

NVD

Vulners

Node

expresstech quiz_and_survey_masterRange≤8.0.4wordpress

[
  {
    "vendor": "expresstech",
    "product": "Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "8.0.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b901b3f8-8bbd-42ef-8e0c-de6d09c4950f
wordfence	www.wordfence.com/vulnerability-advisories-continued/

08 Apr 2026 19:17Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.1 - 7.2

EPSS0.02712

SSVC