Headline
CVE-2021-36864: WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability - Patchstack
Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Verified
Fixed
3.4
CVSS 3.1 score Low severity
Report
Monitoring Not reported to be exploited
Vulnerable versions
<= 7.3.4
PSID
43b605c74fd4
Classification
Cross Site Scripting (XSS)
OWASP Top 10
A7: Cross-Site Scripting (XSS)
Required privilege
Requires editor or higher role user authentication.
Publicly disclosed
2022-10-21
Details
Auth. Reflected Cross-Site Scripting (XSS) vulnerability discovered by Ngo Van Thien (Patchstack Alliance) in WordPress Quiz And Survey Master plugin (versions <= 7.3.4).
Solution
Update the WordPress Quiz And Survey Master plugin to the latest available version (at least 7.3.5).
References