Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E46C532F-B449-40F2-BADB-F1D2BF824D46
HistoryOct 21, 2022 - 12:00 a.m.

Quiz And Survey Master < 7.3.5 - Reflected Cross-Site Scripting

2022-10-2100:00:00
wpscan.com
8
plugin
xss
parameter
editor
security

0.001 Low

EPSS

Percentile

22.9%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting against users with a role as low as editor

CPENameOperatorVersion
quiz-master-nextlt7.3.5

0.001 Low

EPSS

Percentile

22.9%

Related for WPVDB-ID:E46C532F-B449-40F2-BADB-F1D2BF824D46