6.5
Medium
CVE-2026-107862 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This issue affects Quiz And Survey Master: from n/a through 11.2.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz And Survey Master 11.2 | earliest → 11.2.7 | No fix stated |
Other CVEs of Quiz And Survey Master
The 17 CVEs of Quiz And Survey Master →
CVE-2026-111408
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…
8.8
High
CVE-2026-104392
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object…
8.8
High
CVE-2026-104391
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
6.5
Medium
CVE-2026-97289
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz…
7.1
High