WordPress Quiz And Survey Master plugin CVE-2019-9575

Description The Quiz And Survey Master WordPress plugin is vulnerable to reflected XSS as it echoes the quizid parameter without proper encoding. Successful exploitation allows an attacker to execute JavaScript in the context of the application in the name of an attacked user. This in turn enable...

CVE-2019-9575

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlwquizresults quizid XSS...

CVE-2019-9575

The CVE-2019-9575 issue affects the WordPress plugin Quiz And Survey Master (aka Quiz Master Next). The vulnerability is an XSS in wp-admin/admin.php?page=mlw_quiz_results where quiz_id is echoed unsafely (admin-results-page.php), enabling injection of JavaScript in the context of the affected si...