CVE-2021-36865: WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability
Published Sep 30, 2022
·Updated
Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 at WordPress allows attackers to change the content of the quiz.
Affected Software
1 affected component
Quizandsurveymaster Quiz And Survey Master Wordpress<=7.3.4
Remediation
Information
Update to 7.3.5 or higher version.
Event History
Sep 30, 2022
CVE Published
via MITRE·06:52 PM
Data Sourced
via MITRE·06:52 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-36865.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Insecure direct object references (IDOR) vulnerability in ExpressTech Quiz And Survey Master plugin.'
3
What is the severity of CVE-2021-36865?
The severity of CVE-2021-36865 is medium with a severity value of 4.3.
4
Which software is affected by CVE-2021-36865?
The ExpressTech Quiz And Survey Master plugin version <= 7.3.4 at WordPress is affected by CVE-2021-36865.
5
How can an attacker exploit CVE-2021-36865?
An attacker can exploit CVE-2021-36865 to change the content of the quiz.