4.7
Medium
CVE-2024-6879 The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields…
Description
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| quiz_and_survey_master 9.1 | earliest → < 9.1.1 | 9.1.1 |
| Quiz and Survey Master (QSM) 9.1 | earliest → < 9.1.1 | 9.1.1 |
Other CVEs of quiz_and_survey_master
The 8 CVEs of quiz_and_survey_master →
CVE-2024-8758
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which…
4.8
Medium
CVE-2024-6390
The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its…
5.9
Medium
CVE-2024-6025
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz…
6.5
Medium
CVE-2024-5606
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the…
8.8
High