This vulnerability in Quiz And Survey Master arises from missing authorization checks, enabling attackers to bypass access control restrictions. The affected versions include all versions up to and including 10.3.2. The CVSS score of 5.3 reflects a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits are currently in the wild, and no vendor patch or advisory has been provided yet.

Exploitation of this vulnerability could allow an attacker to perform unauthorized actions that modify data within the Quiz And Survey Master plugin. There is no evidence of data confidentiality loss or service disruption. The impact is therefore limited to integrity compromise without broader system availability or confidentiality effects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to limit exposure. Monitor for updates from ExpressTech Systems regarding patches or official mitigations.