Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2023-3575

Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS

Description

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Quiz And Survey Master

Default version status: unaffected

  • 0 to < 8.1.11affected

References