Lucene search
PatchstackCVE-2021-36863HistoryOct 28, 2022 - 4:15 p.m.
CVE-2021-36863
2022-10-2816:15:14
CWE-79
Patchstack
web.nvd.nist.gov
36
5
cve-2021-36863
authentication
contributor+
stored xss
cross-site scripting
expresstech quiz and survey master
wordpress
nvd
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.4%
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.
Affected configurations
Node
expresstechquiz_and_survey_masterRange≤7.3.4wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| expresstech | quiz_and_survey_master | * | cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:* |
CNA Affected
[
{
"vendor": "ExpressTech",
"product": "Quiz And Survey Master (WordPress plugin)",
"versions": [
{
"version": "<= 7.3.4",
"status": "affected",
"lessThanOrEqual": "7.3.4",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
cvelist
cvelist
prion
prion
Cross site scripting
2022-10-28 16:15:00
nvd
nvd
CVE-2021-36863
2022-10-28 16:15:14
wpvulndb
wpvulndb
Quiz And Survey Master < 7.3.5 - Contributor+ Stored Cross-Site Scripting
2022-10-21 00:00:00
patchstack
patchstack
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
19.4%
Related for CVE-2021-36863