CVE-2024-6879 — Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS

CVE-2024-6879

Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Quiz and Survey Master (QSM)	affected 0 before 9.1.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/4da0b318-03e7-409d-9b02-f108e4232c87/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.