CVE-2021-24221: Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the resultid GET parameter on pages with the [qsmresult] shortcode without id attribute, concatenating it in a SQL statement and leading to an SQL injection. The lowest role allowed to use this shortcode in post or pages being author, such user could gain unauthorised access to the DBMS. If the shortcode (without the id attribute) is embed on a public page or post, then unauthenticated users could exploit the injection.
Other sources
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the resultid GET parameter on pages with the [qsmresult] shortcode without id attribute, concatenating it in a SQL statement and leading to an SQL injection. The lowest role allowed to use this shortcode in post or pages being author, such user could gain unauthorised access to the DBMS. If the shortcode (without the id attribute) is embed on a public page or post, then unauthenticated users could exploit the injection.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-24221?
CVE-2021-24221 is a vulnerability in the Quiz And Survey Master plugin for WordPress that allows for SQL injection.
What is the severity of CVE-2021-24221?
CVE-2021-24221 has a severity rating of 8.8 (high).
How does CVE-2021-24221 occur?
CVE-2021-24221 occurs due to the failure to safely sanitize the result_id GET parameter in certain shortcode usages, leading to an SQL injection vulnerability.
What is the affected software?
The affected software is Quiz And Survey Master plugin for WordPress version up to 7.1.12.
How can I fix CVE-2021-24221?
To fix CVE-2021-24221, update the Quiz And Survey Master plugin to version 7.1.12 or higher.