Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jr8c-49mm-qhr4

Опубликовано: 26 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.

EPSS

Процентиль: 46%
0.00234
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.7
nvd
больше 1 года назад

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.

EPSS

Процентиль: 46%
0.00234
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-79