Threats tagged 'ghsa-7j7v-pmrj-v5jp'

A missing authorization vulnerability exists in ExpressTech Quiz And Survey Master (quiz-master-next) up to version 11.3.0. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized users with limited privileges to perform actions beyond their intended permissions. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level with low complexity and no user interaction required.