nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-4033 CVE-2022-4033
MEDIUM
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
Record summary
CVE-2022-4033 has a selected CVSS score of 5.3 (medium).
Description
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e. a number, file path, etc..). This makes it possible attackers to submit values other than the intended input type.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 23, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Quiz and Survey Master (QSM) – Easy Quiz and Survey MakerBrowse expresstech / Quiz and Survey Master (QSM) – Easy Quiz and Survey MakerDefault status: unaffected | CVE List | Through 8.0.4 | affected |
References
4plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2801761%40quiz-master-next&new=2801761%40quiz-master-next&sfp_email=&sfph_mail= wordfence.com
https://www.wordfence.com/threat-intel/vulnerabilities/id/9f5cc779-c7de-42e6-a812-5c0539067b8c?source=cve wordfence.com
https://www.wordfence.com/vulnerability-advisories-continued