CVE-2022-40698: WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability
Published Nov 18, 2022
·Updated
Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.
Affected Software
1 affected component
ExpressTech Quiz And Survey Master<7.3.11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/quiz-and-survey-masterto a version that resolves this vulnerability.Fixed in 7.3.11
Event History
Nov 18, 2022
CVE Published
via MITRE·09:45 PM
Data Sourced
via MITRE·09:45 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2022-40698.
2
What is the title of this vulnerability?
The title of this vulnerability is Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3…
3
What is the affected software?
The affected software is Quiz And Survey Master plugin version <= 7.3.10 on WordPress.
4
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 6.1.
5
How can I fix this vulnerability?
To fix this vulnerability, you should update Quiz And Survey Master plugin to version 7.3.11 or higher.