Quiz And Survey Master < 8.1.19 - Quiz Results Deletion via CSRF

2024-01-0500:00:00

wpscan.com

csrf

quiz

deletion

attackers

security

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not have CSRF checks in some functions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete quiz results

CPENameOperatorVersion
eq8.1.19

CPE	Name	Operator	Version
		eq	8.1.19

References

patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-18-cross-site-request-forgery-csrf-vulnerability