5.9
Medium
CVE-2024-6390 The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its…
Description
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| quiz_and_survey_master 9.1 | earliest → < 9.1.0 | 9.1.0 |
| Quiz and Survey Master (QSM) 9.1 | earliest → < 9.1.0 | 9.1.0 |
References
- wpscan.com wpscan.com
Timeline
- Published
- Last modified
Other CVEs of quiz_and_survey_master
The 8 CVEs of quiz_and_survey_master →
CVE-2024-8758
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2024-6879
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields…
4.7
Medium
CVE-2024-6025
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz…
6.5
Medium
CVE-2024-5606
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the…
8.8
High