CVE-2022-46862: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.7 versions...

PT-2023-15087

Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions = 8.0.7 Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended...

Design/Logic Flaw

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

CVE-2021-36906

The CVE refers to IDOR vulnerabilities in the ExpressTech Quiz And Survey Master WordPress plugin, specifically versions up to 7.3.6. The root cause is insufficient authorization checks that allow insecure direct object references, enabling actions such as deleting or duplicating quizzes by users...

CVE-2021-36906: Authorization Bypass Through User-Controlled Key

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

CVE-2021-36864

Summary of CVE-2021-36864 : Affected product is the WordPress plugin “Quiz And Survey Master” (aka ExpressTech Quiz And Survey Master)

CVE-2021-36863

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

CVE-2021-36863

The CVE-2021-36863 entry covers a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin ExpressTech Quiz And Survey Master (versions

PT-2022-10585

Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master plugin versions prior to 7.3.5 Description The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website,...

PT-2022-10584

Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master plugin versions prior to 7.3.5 Description The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or users with higher privileges. The...

CVE-2021-36863: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

CVE-2021-36864: Improper Neutralization of Input During Web Page Generation

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

CVE-2021-36865

Insecure direct object references IDOR vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 at WordPress allows attackers to change the content of the quiz...

Spoofing

Insecure direct object references IDOR vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 at WordPress allows attackers to change the content of the quiz...

CVE-2021-36865

CVE-2021-36865 affects WordPress environments using the ExpressTech/Quiz And Survey Master plugin family (WordPress Quiz And Survey Master/Quiz Master Next) up to version 7.3.4. The vulnerability is an insecure direct object reference (IDOR) that allows an attacker to change quiz content. Root ca...

CVE-2021-36865: Authorization Bypass Through User-Controlled Key

Insecure direct object references IDOR vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 at WordPress allows attackers to change the content of the quiz...