Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)
Vulnerability Description
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a logged in admin to open a malicious link
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-24368
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- renniepak
More from ExpressTech
View All →Affected Vendor
ExpressTech
View all reports →