2 matches found
CVE-2026-14824
The Quiz and Survey Master QSM WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML attribute, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the browser of any user viewing th...
4.8CVSS0.00168EPSS
SaveExploits0References1
EUVD-2026-52585
The Quiz and Survey Master QSM WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML attribute, allowing users with contributor-level access and above to inject arbitrary JavaScript that executes in the browser of any user viewing th...
4.8CVSS5.6AI score0.00168EPSS
SaveExploits0References1
20