A Cross-Site Scripting (XSS) vulnerability exists in ExpressTech Quiz And Survey Master (quiz-master-next) up to version 11.3.0 due to improper neutralization of script-related HTML tags. This flaw allows an attacker to inject code that could be executed in the context of a user's browser. The vulnerability has a CVSS 3.1 base score of 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.