Lucene search
+L

42 matches found

Positive Technologies
Positive Technologies
added 2024/03/21 12:0 a.m.5 views

PT-2024-22171 · Expresstech · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master versions through 8.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker c...

5.9CVSS9.1AI score0.00338EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/16 1:15 a.m.21 views

CVE-2023-51521

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.18...

5.4CVSS5.5AI score0.00197EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/15 12:0 a.m.6 views

PT-2024-14175 · Expresstech · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master versions 8.1.18 and earlier Description: A Cross-Site Request Forgery CSRF issue affects ExpressTech Quiz And Survey Master. This issue allows an attacker to perform unintended actions on a user's behalf...

5.4CVSS9.5AI score0.00197EPSS
SaveExploits0References5
CVE
CVE
added 2023/11/22 11:16 p.m.88 views

CVE-2023-47834

CVE-2023-47834 affects the WordPress plugin “Quiz And Survey Master” (ExpressTech Quiz And Survey Master) for versions

6.5CVSS6AI score0.00385EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.7 views

PT-2023-30637 · Unknown · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master plugin versions prior to 8.1.14 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For ExpressTech Quiz...

6.5CVSS6.2AI score0.00385EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/13 12:15 a.m.15 views

CVE-2023-26524

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

8.8CVSS0.00309EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/13 12:15 a.m.20 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

6.8CVSS7.5AI score0.00309EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/12 11:55 p.m.96 views

CVE-2023-26524

The CVE-2023-26524 entry concerns a CSRF vulnerability in the WordPress plugin Quiz And Survey Master (ExpressTech) , affecting versions up to 8.0.10 . The issue exposes a risk to unauthenticated users that could impact integrity, confidentiality, and availability as indicated by CVSS metrics (NV...

8.8CVSS6.6AI score0.00309EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/12 11:55 p.m.17 views

CVE-2023-26524 WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

4.3CVSS7.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/12 12:0 a.m.8 views

PT-2023-20700 · WordPress · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions prior to 8.0.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker ...

8.8CVSS8.6AI score0.00309EPSS
SaveExploits0References4
NVD
NVD
added 2023/02/14 12:15 p.m.38 views

CVE-2022-46862

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.7 versions...

8.8CVSS5.9AI score0.00384EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.8 views

WordPress Plugin ExpressTech Quiz And Survey Master 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.7AI score0.00384EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/03 8:15 p.m.22 views

Design/Logic Flaw

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

6.5CVSS8.8AI score0.00549EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/11/03 7:33 p.m.73 views

CVE-2021-36906

The CVE refers to IDOR vulnerabilities in the ExpressTech Quiz And Survey Master WordPress plugin, specifically versions up to 7.3.6. The root cause is insufficient authorization checks that allow insecure direct object references, enabling actions such as deleting or duplicating quizzes by users...

8.8CVSS6.5AI score0.00549EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/28 6:15 p.m.24 views

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS0.00424EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/28 6:15 p.m.8 views

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS5.8AI score0.00424EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/28 5:5 p.m.79 views

CVE-2021-36864

Summary of CVE-2021-36864 : Affected product is the WordPress plugin “Quiz And Survey Master” (aka ExpressTech Quiz And Survey Master)

5.4CVSS4.5AI score0.00424EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/28 4:15 p.m.25 views

CVE-2021-36863

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS0.0046EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/28 3:11 p.m.77 views

CVE-2021-36863

The CVE-2021-36863 entry covers a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin ExpressTech Quiz And Survey Master (versions

5.4CVSS5.2AI score0.0046EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/09/30 7:15 p.m.24 views

CVE-2021-36865

Insecure direct object references IDOR vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 at WordPress allows attackers to change the content of the quiz...

4.3CVSS0.00434EPSS
SaveExploits0References2
Rows per page
Query Builder