Lucene search
K

81 matches found

EUVD
EUVD
added 2026/05/06 6:30 p.m.1 views

EUVD-2026-27864

A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and poll results. Cisco has addressed this vulnerability in Cisco Slido and no customer action is needed. This vulnerability existed...

5.4CVSS5.8AI score0.00041EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:49 a.m.2 views

CVE-2025-23724

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oleksandr87 University Quizzes Online university-quizzes-online allows Reflected XSS.This issue affects University Quizzes Online: from n/a through = 1.4...

7.1CVSS7.2AI score0.00178EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/08 3:14 a.m.3 views

CVE-2025-9637

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...

6.5CVSS5.5AI score0.00099EPSS
Exploits0References1
OSV
OSV
added 2026/01/06 10:15 a.m.2 views

CVE-2025-9637

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...

6.5CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2026/01/06 10:15 a.m.4 views

CVE-2025-9637

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...

6.5CVSS0.00099EPSS
Exploits0References4
Patchstack
Patchstack
added 2026/01/06 9:52 a.m.5 views

WordPress Quiz and Survey Master (QSM) plugin <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads vulnerability

Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads vulnerability discovered by Rahul Sreenivasan Tr0j4n - Mobikwik in WordPress Plugin Quiz And Survey Master versions = 10.3.1...

6.5CVSS6.4AI score0.00099EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2026/01/06 9:20 a.m.11 views

CVE-2025-9637

CVE-2025-9637 (Quiz and Survey Master, QSM) Affected: Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker for WordPress, versions up to and including 10.3.1. Root cause: missing capability and status checks on multiple functions, enabling unauthenticated users to view unpublished/private/pa...

6.5CVSS5.1AI score0.00099EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/06 9:20 a.m.1 views

CVE-2025-9637 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...

6.5CVSS5.1AI score0.00099EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/06 9:20 a.m.22 views

CVE-2025-9637 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions up to, and including, 10.3.1. This makes it possible for unauthenticat...

6.5CVSS0.00099EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.3 views

PT-2026-1430

Name of the Vulnerable Software and Affected Versions Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress versions prior to and including 10.3.1 Description The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is susceptible to unauthorized...

6.5CVSS6.5AI score0.00099EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3372

Malicious code in bioql PyPI...

7.1CVSS8.7AI score0.00178EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-4044

Malicious code in bioql PyPI...

7.1CVSS9.1AI score0.0006EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-49877

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00128EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-28360

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00143EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/23 8:40 a.m.4 views

CVE-2025-50035

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through = 3.1...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
NVD
NVD
added 2025/06/20 3:15 p.m.5 views

CVE-2025-50035

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through = 3.1...

6.5CVSS0.00143EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/20 3:3 p.m.9 views

CVE-2025-50035 WordPress Fyrebox Quizzes plugin <= 3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyrilG Fyrebox Quizzes fyrebox-shortcode allows Stored XSS.This issue affects Fyrebox Quizzes: from n/a through = 3.1...

6.5CVSS0.00143EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/20 3:3 p.m.2 views

CVE-2025-50035 WordPress Fyrebox Quizzes plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CyrilG Fyrebox Quizzes allows Stored XSS. This issue affects Fyrebox Quizzes: from n/a through 3.0...

6.5CVSS6.4AI score0.00143EPSS
Exploits0References1
CVE
CVE
added 2025/06/20 3:3 p.m.14 views

CVE-2025-50035

CVE-2025-50035 concerns WordPress plugin Fyrebox Quizzes (versions n/a through 3.0). Root cause: improper neutralization of input during web page generation, enabling Stored XSS. Affected software: CyrilG Fyrebox Quizzes (WordPress plugin). Impact as described: stored XSS vulnerability that could...

6.5CVSS5.9AI score0.00143EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin Fyrebox Quizzes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.00143EPSS
Exploits0References1
Rows per page
Query Builder