This vulnerability in Quiz And Survey Master arises from missing authorization checks due to incorrectly configured access control security levels. It affects versions up to and including 10.3.4. The issue could allow users with some privileges to escalate their capabilities or perform unauthorized actions within the plugin. The CVSS score of 4.3 indicates a medium severity impact primarily related to integrity, with no confidentiality or availability impact. No vendor advisory or patch information is provided, and the product is not a cloud service.

The impact is limited to integrity as unauthorized actions could be performed by users with some privileges. There is no reported impact on confidentiality or availability. No known exploits exist in the wild, reducing immediate risk. However, the vulnerability could be leveraged to perform unauthorized modifications within the affected plugin.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and restrict user privileges carefully to minimize risk. Monitor for updates from ExpressTech Systems regarding patches or official mitigations.