Skip to content
Sign in
6.5 Medium

CVE-2026-104391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7.

Affected products and versions

Product Affected versions Fixed in
Quiz And Survey Master 11.2 earliest → 11.2.7 No fix stated

Other CVEs of Quiz And Survey Master

The 17 CVEs of Quiz And Survey Master →
CVE-2026-111408 Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object… 8.8 High CVE-2026-107862 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz… 6.5 Medium CVE-2026-104392 Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object… 8.8 High CVE-2026-97289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz… 7.1 High
Track this CVE