CVE-2026-48867 Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Quiz And Survey Master <= 11.1.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quiz And Survey Master 11.1	earliest → 11.1.2	No fix stated

Other CVEs of Quiz And Survey Master

The 17 CVEs of Quiz And Survey Master →

CVE-2026-111408 Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object… 8.8 High CVE-2026-107862 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz… 6.5 Medium CVE-2026-104392 Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object… 8.8 High CVE-2026-104391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz… 6.5 Medium