Threats tagged 'ghsa-h7jx-wqcx-pprg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-103917The The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to arbitrary Medium6.52026-11-07GCVE DatabaseCVE-2026-103917 The Quiz and Survey Master (QSM) plugin for WordPress versions up to and including 11.2.7 contains a vulnerability that allows unauthenticated attackers to execute arbitrary shortcodes. This occurs because the plugin does not properly validate input before calling do_shortcode, and the nonce used for submission acts as a CSRF token rather than an effective authorization barrier. Report on CVE-2026-103917 Vulnerability CWE-94 #ghsa-h7jx-wqcx-pprg	GCVE Database	2026-11-07

Page 1 of 1