Lucene search

[email protected]NVD:CVE-2021-36905

HistoryNov 17, 2022 - 11:15 p.m.

CVE-2021-36905

2022-11-1723:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cross-site scripting

wordpress

cve-2021-36905

quiz and survey master

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

JSON

Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress.

Affected configurations

Nvd

Node

expresstechquiz_and_survey_masterRange<7.3.5wordpress

VendorProductVersionCPE
expresstechquiz_and_survey_master*cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
expresstech	quiz_and_survey_master	*	cpe:2.3:a:expresstech:quiz_and_survey_master::::::wordpress::*

References

patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-4-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve

wordpress.org/plugins/quiz-master-next/#developers