9.3
Critical
CVE-2023-28787 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Quiz…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz And Survey Master 8.1 | earliest → 8.1.4 | No fix stated |
Other CVEs of Quiz And Survey Master
The 17 CVEs of Quiz And Survey Master →
CVE-2026-111408
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…
8.8
High
CVE-2026-107862
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
6.5
Medium
CVE-2026-104392
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…
8.8
High
CVE-2026-104391
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
6.5
Medium