CVE-2019-16172

CVE-2019-16172 Le scanner CVE-2019-16172 est conçu pour vérifier les instances LimeSurvey pour la vulnérabilité XSS stockée. Descriptions des CVE CVE-2019-16172 Description : CVE-2019-16172 est une vulnérabilité XSS stockée trouvée dans les versions de LimeSurvey antérieures à 3.17. La...

CVE-2026-96558

The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting in all versions up to and including 11.2.6 . The flaw stems from insufficient input sanitization and output escaping of the 'qsm_hidden_questions' parameter. An unauthenticated attacker ca...

CVE-2026-96558 Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter

The Quiz and Survey Master QSM – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-96227

The Quiz and Survey Master QSM – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsmhiddenquestions' parameter in all versions up to, and including, 11.2.6 due to insufficient input sanitization and output escaping. This makes it...

CVE-2026-8337

CVE-2026-8337 CVE-2026-8337 هي ثغرة مرجع كائن مباشر غير آمن IDOR في Concrete CMS تؤثر على ميزة الاستبيان. على عكس CVE-2026-8347 التي تضمنت ارتباطات Express، تسمح هذه الثغرة لمهاجم غير مصادق بالمشاركة في استبيان مقيد/خاص ضمن تكوينات مواقع محددة. نظرة عامة يحتوي Concrete CMS 9.5.0 والإصدارات الأقدم...

PowerSharpPack

Sponsored by PowerSharpPack Many useful offensive CSharp Projects wraped into Powershell for easy usage. Why? In my personal opinion offensive Powershell is not dead because of AMSI, Script-block-logging, Constrained Language Mode or other protection features. Any of these mechanisms can be...

CVE-2026-104392

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

EUVD-2026-95741

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-104392

The Quiz And Survey Master WordPress plugin (versions

CVE-2026-104392 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

PT-2026-108881

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-90817

CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE Vérificateur Python 3 et hook d'exploit configurable pour CVE-2026-90817 Securifera / Ryan Wincey. | ---|--- Produit| REDCap Vanderbilt Affecté| ≥ 13.3.0 jusqu'au correctif de branche Corrigé| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVS...

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

CVE-2026-104391

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2022-46484

CVE-2022-46484 الكشف عن المعلومات في الاستبيانات المحمية بكلمة مرور في برنامج Data Illusion Survey Software Solutions NGSurvey الإصدار v2.4.28 والإصدارات الأقدم يسمح للمهاجمين بالاطلاع على كلمة المرور للوصول إلى الاستبيانات وتقديمها بشكل تعسفي...

EUVD-2026-94252

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-104391 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-104391 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7...

CVE-2026-104391

The ExpressTech Quiz And Survey Master (quiz-master-next) WordPress plugin, versions n/a through 11.2.7 , is vulnerable to Stored Cross-Site Scripting (XSS) . This flaw stems from the Improper Neutralization of Input During Web Page Generation . While the documents confirm the existence of the vu...

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Quiz And Survey Master versions = 11.2.7...