Description
Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ExpressTech Quiz And Survey Master
versions prior to 7.1.14affected
References
- https://quizandsurveymaster.com/ ↗
- https://wordpress.org/plugins/quiz-master-next/ ↗
- https://plugins.trac.wordpress.org/changeset?new=2503364%40quiz-master-next%2Ftrunk%2Fphp%2Fadmin%2Fquizzes-page.php&old=2490516%40quiz-master-next%2Ftrunk%2Fphp%2Fadmin%2Fquizzes-page.php ↗
- https://jvn.jp/en/jp/JVN65388002/index.html ↗