Lucene search
K

93 matches found

Positive Technologies
Positive Technologies
added 2023/11/22 12:0 a.m.2 views

PT-2023-30637 · Unknown · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master plugin versions prior to 8.1.14 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For ExpressTech Quiz...

6.5CVSS6.2AI score0.00385EPSS
Exploits0References3
NVD
NVD
added 2023/11/13 12:15 a.m.10 views

CVE-2023-26524

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

8.8CVSS0.00309EPSS
Exploits0References1
OSV
OSV
added 2023/11/13 12:15 a.m.13 views

CVE-2023-26524

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

8.8CVSS7AI score
Exploits0References1
Prion
Prion
added 2023/11/13 12:15 a.m.15 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.10 versions...

6.8CVSS7.5AI score0.00309EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/11/12 11:55 p.m.91 views

CVE-2023-26524

The CVE-2023-26524 entry concerns a CSRF vulnerability in the WordPress plugin Quiz And Survey Master (ExpressTech) , affecting versions up to 8.0.10 . The issue exposes a risk to unauthenticated users that could impact integrity, confidentiality, and availability as indicated by CVSS metrics (NV...

8.8CVSS6.6AI score0.00309EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/12 12:0 a.m.5 views

PT-2023-20700 · WordPress · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions prior to 8.0.11 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker ...

8.8CVSS8.6AI score0.00309EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.4 views

PT-2023-21962

Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master versions through 8.1.4 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

9.3CVSS8AI score0.01977EPSS
Exploits0References5
NVD
NVD
added 2023/02/14 12:15 p.m.23 views

CVE-2022-46862

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.7 versions...

8.8CVSS5.9AI score0.00384EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/14 11:26 a.m.7 views

CVE-2022-46862 WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin = 8.0.7 versions...

4.3CVSS8.9AI score0.00384EPSS
Exploits0References1
CVE
CVE
added 2023/02/14 11:26 a.m.56 views

CVE-2022-46862

CVE-2022-46862 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin, affecting versions up to 8.0.7. The root cause is insufficient CSRF protection for plugin actions. A fix is available in versi...

8.8CVSS6.6AI score0.00384EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/02/14 12:0 a.m.3 views

WordPress Plugin ExpressTech Quiz And Survey Master 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.7AI score0.00384EPSS
Exploits0References2
OSV
OSV
added 2022/11/03 8:15 p.m.4 views

CVE-2021-36906

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

8.8CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2022/11/03 8:15 p.m.18 views

Design/Logic Flaw

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

6.5CVSS8.8AI score0.00525EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/03 7:33 p.m.8 views

CVE-2021-36906 WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

2.7CVSS5.4AI score0.00525EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/11/03 7:33 p.m.18 views

CVE-2021-36906 WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

Multiple Insecure Direct Object References IDOR vulnerabilities in ExpressTech Quiz And Survey Master plugin = 7.3.6 on WordPress...

2.7CVSS9AI score0.00525EPSS
Exploits0References2
CVE
CVE
added 2022/11/03 7:33 p.m.65 views

CVE-2021-36906

The CVE refers to IDOR vulnerabilities in the ExpressTech Quiz And Survey Master WordPress plugin, specifically versions up to 7.3.6. The root cause is insufficient authorization checks that allow insecure direct object references, enabling actions such as deleting or duplicating quizzes by users...

8.8CVSS6.5AI score0.00525EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/03 12:0 a.m.3 views

WordPress plugin ExpressTech Quiz And Survey Master 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS7.9AI score0.00525EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/11/03 12:0 a.m.3 views

PT-2022-10600 · Expresstech · Expresstech Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: ExpressTech Quiz And Survey Master plugin versions prior to 7.3.7 Description: The issue concerns Multiple Insecure Direct Object References IDOR vulnerabilities. Recommendations: For ExpressTech Quiz And Survey Master plugin versions prior t...

8.8CVSS8.6AI score0.00525EPSS
Exploits0References4
NVD
NVD
added 2022/10/28 6:15 p.m.14 views

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS0.00412EPSS
Exploits0References2
OSV
OSV
added 2022/10/28 6:15 p.m.3 views

CVE-2021-36864

Auth. editor+ Reflected Cross-Site Scripting XSS vulnerability in ExpressTech Quiz And Survey Master plugin = 7.3.4 on WordPress...

5.4CVSS5.8AI score0.00412EPSS
Exploits0References2
Rows per page
Query Builder