CVE-2019-17599: XSS
The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter (and/or the quizid parameter). The component is: admin/quiz-options-page.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-17599?
CVE-2019-17599 is a vulnerability in the Quiz And Survey Master plugin before version 6.3.5 for WordPress, which allows an attacker to execute arbitrary HTML and JavaScript code via certain parameters.
What is the impact of CVE-2019-17599?
The impact of CVE-2019-17599 is that it allows an attacker to execute arbitrary HTML and JavaScript code.
How does CVE-2019-17599 affect the Quiz And Survey Master plugin?
CVE-2019-17599 affects the Quiz And Survey Master plugin by allowing an attacker to execute arbitrary HTML and JavaScript code through specific parameters.
What is the severity of CVE-2019-17599?
The severity of CVE-2019-17599 is medium with a CVSS score of 6.1.
How can I fix CVE-2019-17599 in the Quiz And Survey Master plugin?
To fix CVE-2019-17599, you should update the Quiz And Survey Master plugin to version 6.3.5 or later.