CVE-2026-62140 Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions

Description

Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions.

Affected products and versions

Product	Affected versions	Fixed in
Quiz And Survey Master 11.2	earliest → 11.2.5	No fix stated

Other CVEs of Quiz And Survey Master

The 10 CVEs of Quiz And Survey Master →

CVE-2026-97289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz… 7.1 High CVE-2026-65454 Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions 8.5 High CVE-2025-67987 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech… 8.5 High CVE-2026-25329 Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting… 4.3 Medium