Extension WordPress
Vulnérabilités Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, page 3
Cette page rassemble les failles publiées pour Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
74 fiches
Quiz and Survey Master <= 8.1.4 – Unauthenticated SQL Injection
The Quiz and Survey Master plugin for WordPress is vulnerable to SQL Injection via the 'question_ids_[XX]' cookie in versions up to, and including, 8.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…
*-8.1.4
8.1.5
16/04/2023
Quiz And Survey Master <= 8.0.10 – Cross-Site Request Forgery to Quiz Restoration
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.10. This is due to missing or incorrect nonce validation on the qsm_restore_function function. This makes it possible…
*-8.0.10
8.1.0
28/02/2023
Quiz And Survey Master <= 8.0.8 – Unauthenticated Arbitrary Media Deletion
The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsm_remove_file_fd_question AJAX action in versions up to, and including, 8.0.8. This makes it possible…
*-8.0.8
8.0.9
15/02/2023
Quiz And Survey Master <= 8.0.8 – Cross-Site Request Forgery to Arbitrary Media Deletion
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This is due to missing nonce validation on the function associated with the qsm_remove_file_fd_question AJAX action. This…
*-8.0.8
8.0.9
08/02/2023
Quiz And Survey Master <= 8.0.7 – Cross-Site Request Forgery
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.7. This is due to missing or incorrect nonce validation on the qsm_update_text_message function. This makes it possible…
*-8.0.7
8.0.8
16/12/2022
Quiz and Survey Master <= 8.0.4 – Unauthenticated iFrame Injection via Paragraph and Short Answer
The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input sanitization and output escaping that allowed iframe tags to be…
*-8.0.4
8.0.5
29/11/2022
Quiz and Survey Master <= 8.0.4 – Improper Input Validation
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than…
*-8.0.4
8.0.5
16/11/2022
Quiz And Survey Master <= 7.3.10 – Cross-Site Request Forgery
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.3.10. This is due to missing or incorrect nonce validation on several of its functions. This makes it…
*-7.3.10
7.3.11
23/10/2022
Quiz And Survey Master <= 7.3.10 – Sensitive Information Disclosure
The Quiz And Survey Master plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 7.3.10. This could allow unauthenticated attackers to extract sensitive user or configuration data.
*-7.3.10
7.3.11
21/10/2022
Quiz And Survey Master <= 7.3.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 7.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-7.3.4
7.3.5
21/10/2022
Quiz And Survey Master <= 7.3.4 – Multiple Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 7.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-7.3.4
7.3.5
21/10/2022
Quiz And Survey Master <= 7.3.10 – Missing Authorization
The Quiz And Survey Master plugin for WordPress is vulnerable to authorization bypass due to a missing user validations on the qsm_clear_audit_data function in versions up to, and including, 7.3.10. This makes it possible for unauthenticated attackers to…
*-7.3.10
7.3.11
21/10/2022
Quiz And Survey Master <= 7.3.4 – Reflected Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 7.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-7.3.4
7.3.5
21/10/2022
Quiz And Survey Master <= 7.3.10 – Unauthenticated Stored Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 7.3.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level…
*-7.3.10
7.3.11
21/10/2022
Quiz And Survey Master <= 7.3.6 – Insecure Direct Object Reference
The Quiz And Survey Master plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 7.3.6. This is due to insufficient validation on a user controlled key. This makes it possible for…
*-7.3.6
7.3.7
21/10/2022
Quiz And Survey Master <= 7.3.4 – Authenticated (Administrator+) SQL Injection
The Quiz And Survey Master plugin for WordPress is vulnerable to SQL Injection via several parameters in versions up to, and including, 7.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-7.3.4
7.3.5
21/10/2022
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 7.3.4 – Insecure Direct Object Reference
The Quiz And Survey Master plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 7.3.4. This is due to insufficient validation on the key controlling a quiz's id. This makes it…
*-7.3.4
7.3.5
29/09/2022
Quiz And Survey Master <= 7.3.6 – Reflected Cross-Site Scripting
Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors.
*-7.3.6
7.3.7
12/01/2022
Quiz And Survey Master <= 7.3.6 – Cross-Site Request Forgery
Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.
*-7.3.5
7.3.7
12/01/2022
Quiz And Survey Master <= 7.3.6 – Stored Cross-Site Scripting
Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website that uses Quiz And Survey Master.
*-7.3.6
7.3.7
12/01/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.