Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ExpresstechQuiz And Survey Master

9 matches found

CVE
CVE•added 2023/11/23 12:15 a.m.•72 views

CVE-2023-47834

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master plugin

6.5CVSS6AI score0.00162EPSS
CVE
CVE•added 2021/06/20 1:15 p.m.•69 views

CVE-2021-24368

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a l...

6.1CVSS6.2AI score0.0019EPSS
CVE
CVE•added 2019/12/13 2:15 p.m.•60 views

CVE-2019-17599

The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter (and/or the quiz_id parameter). The component is: admin/quiz...

6.1CVSS6.1AI score0.00737EPSS
CVE
CVE•added 2022/01/17 10:15 a.m.•50 views

CVE-2022-0181

Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors.

6.1CVSS5.9AI score0.00668EPSS
CVE
CVE•added 2022/11/18 11:15 p.m.•47 views

CVE-2022-40698

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin

6.1CVSS5.6AI score0.00109EPSS
CVE
CVE•added 2025/03/25 6:15 a.m.•46 views

CVE-2024-10679

The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setu...

6.1CVSS5.8AI score0.00056EPSS
CVE
CVE•added 2020/08/16 6:15 p.m.•40 views

CVE-2016-11085

php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the question_name parameter because js/admin_question.js mishandles parsing inside of a SCRIPT element.

6.5CVSS6.4AI score0.0023EPSS
CVE
CVE•added 2021/08/18 6:15 a.m.•39 views

CVE-2021-20792

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors.

6.1CVSS6AI score0.09715EPSS
CVE
CVE•added 2024/07/11 6:15 a.m.•36 views

CVE-2024-6025

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks

6.5CVSS5.4AI score0.00037EPSS