CVE-2023-3575

Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks

Affected

Quiz And Survey Master

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.55% chance of exploitation in the next 30 days, 45th percentile

Published

2023-08-07

Updated

2025-04-23

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/6f884688-2c0d-4844-bd31-ef7085edf112

References

• CVE Record
• NVD entry