CVE Catalog
CVE-2023-3575
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.47%
37th percentile - higher than 37% of all known CVEs
Summary
The Quiz And Survey Master WordPress plugin before version 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or account takeover.
Recommendation
It is recommended to update the plugin to the latest version 8.1.11 or higher to mitigate this vulnerability.
Original NVD description (English source)
The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks