Description

WordPress Plugin Quiz And Survey Master-Best Quiz, Exam and Survey is prone to multiple SQL injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. WordPress Plugin Quiz And Survey Master-Best Quiz, Exam and Survey version 4.4.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.4.4 or latest

References

https://github.com/fpcorso/quiz_master_next/blob/master/CHANGELOG.md

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-0782)

WP-Property-WordPress Powered Real Estate and Property Management Information Disclosure (1.38.3.2)

MySQL CVE-2023-22058 Vulnerability (CVE-2023-22058)

NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.23)

Quiz And Survey Master-Best Quiz, Exam and Survey for WordPress Multiple Vulnerabilities (8.0.8)

Severity

High

Classification

CWE-89 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Tags

Missing Update SQL Injection