8.8
Élevée
CVE-2024-5606 The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the…
Description
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_delete_question_from_database AJAX action, leading to a SQL injection exploitable by Contributors and above role
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Quiz and Survey Master (QSM) 9.0 | premières → < 9.0.2 | 9.0.2 |
| quiz_and_survey_master 9.0 | premières → < 9.0.2 | 9.0.2 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Quiz and Survey Master (QSM)
Les 14 CVE de Quiz and Survey Master (QSM) →
CVE-2026-79615
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question…
2.7
Faible
CVE-2026-14826
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the…
2.7
Faible
CVE-2026-14825
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before…
2.7
Faible
CVE-2026-14824
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.2 does not properly escape a question setting before…
4.8
Moyenne