Lucene search

K
wpvulndbWpvulndbWPVDB-ID:8BB3E560-2540-4041-AF77-F42A4493A7D3
HistoryJan 12, 2022 - 12:00 a.m.

Quiz And Survey Master < 7.3.7 - CSRF

2022-01-1200:00:00
wpscan.com
8
quiz and survey master
csrf
nonce check
attacker
logged users
csrf attack

EPSS

0.002

Percentile

53.6%

The plugin is lacking nonce check, which could allow attacker to make logged users perform unwanted actions via a CSRF attack

EPSS

0.002

Percentile

53.6%

Related for WPVDB-ID:8BB3E560-2540-4041-AF77-F42A4493A7D3