8.5
High
CVE-2025-67987 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz And Survey Master 10.3 | earliest → 10.3.1 | No fix stated |
Other CVEs of Quiz And Survey Master
The 10 CVEs of Quiz And Survey Master →
CVE-2026-97289
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
7.1
High
CVE-2026-62140
Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions
5.3
Medium
CVE-2026-65454
Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions
8.5
High
CVE-2026-25329
Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting…
4.3
Medium