Unrated

Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS

CVE-2024-6390 First seen on SecPulse Aug 3, 2024

Original description The description as published by the source.

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Key facts

Severity: Unrated
Published: Aug 3, 2024
First seen on SecPulse: Aug 3, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05