2024-07-01 08:05:39 +00:00

21 lines
745 B
JSON

{
"id": "CVE-2024-4934",
"sourceIdentifier": "contact@wpscan.com",
"published": "2024-07-01T06:15:23.847",
"lastModified": "2024-07-01T06:15:23.847",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks"
}
],
"metrics": {},
"references": [
{
"url": "https://wpscan.com/vulnerability/a2270ee1-3211-4b16-b3d7-6cdd732f7155/",
"source": "contact@wpscan.com"
}
]
}