Lucene search
+L

6 matches found

redhatcve
redhatcve
added 2025/05/23 8:13 a.m.13 views

CVE-2024-6025

The Quiz and Survey Master QSM WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.8AI score0.00377EPSS
Exploits1References1
nvd
nvd
added 2024/07/11 6:15 a.m.18 views

CVE-2024-6025

The Quiz and Survey Master QSM WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks...

6.5CVSS0.00377EPSS
Exploits1References1
vulnrichment
vulnrichment
added 2024/07/11 6:0 a.m.15 views

CVE-2024-6025 Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS

The Quiz and Survey Master QSM WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks...

5.9AI score0.00377EPSS
Exploits1References1
cvelist
cvelist
added 2024/07/11 6:0 a.m.32 views

CVE-2024-6025 Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS

The Quiz and Survey Master QSM WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks...

0.00377EPSS
Exploits1References1
osv
osv
added 2024/07/11 6:0 a.m.14 views

CVE-2024-6025 Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS

The Quiz and Survey Master QSM WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks...

6.5CVSS5.9AI score0.00377EPSS
Exploits1References3
patchstack
patchstack
added 2024/07/11 12:0 a.m.14 views

WordPress Quiz And Survey Master Plugin < 9.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Quiz And Survey Master Type Plugin Vulnerable versions 9.0.5 Fixed in 9.0.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6025 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 041e8eaa0b85 Credits Dmitrii Ignatyev...

6.5CVSS5.8AI score0.00377EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder