Non évaluée

Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS

CVE-2024-6390 Première détection SecPulse Aug 3, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Faits clés

Gravité: Non évaluée
Publication: Aug 3, 2024
Première détection SecPulse: Aug 3, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05