Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24368

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Quiz And Survey Master – Best Quiz, Exam And Survey Plugin For WordPress
Vendor
CVE Published:
20 June 2021

What is CVE-2021-24368?

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a logged in admin to open a malicious link

Affected Version(s)

Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress 7.1.18

References

https://wpscan.com/vulnerability/7f2fda5b-45a5-4fc6-968f-...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

renniepak
.