CVE-2023-3575
Assigner: WPScan
Published: 2023-08-07T14:31:20.665Z
State: PUBLISHED
title: Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS
problemTypes: descriptions: description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
affected: vendor: Unknown
product: Quiz And Survey Master
versions: status: affected
versionType: custom
version: 0
lessThan: 8.1.11
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks
credits: value: Andreas Damen
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator