← Database

CVE-2024-6025

MEDIUM CVSS: 5.4 Published: 2024-07-11 Modified: 2026-06-17

Description

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored Cross-Site Scripting attacks

Affected Platforms

Expresstech Quiz And Survey Master

Weakness Type

CWE-79

References