Lucene search
WPScanVULNRICHMENT:CVE-2024-8758HistorySep 23, 2024 - 6:00 a.m.
CVE-2024-8758 Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS
2024-09-2306:00:05
WPScan
github.com
1
quiz and survey master
wordpress
stored xss
cross-site scripting
administratorζι
AI Score
5.7
Confidence
High
EPSS
0
Percentile
14.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Related
nvd
nvd
CVE-2024-8758
2024-09-23 06:15:04
osv
osv
CVE-2024-8758
2024-09-23 06:15:04
cvelist
cvelist
CVE-2024-8758 Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS
2024-09-23 06:00:05
cve
cve
CVE-2024-8758
2024-09-23 06:15:04
AI Score
5.7
Confidence
High
EPSS
0
Percentile
14.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-8758