CVE-2022-0180

2022-01-1709:10:26

jpcert

www.cve.org

cve-2022-0180

csrf

quiz and survey master

remote attacker

authentication hijack

AI Score

Confidence

High

EPSS

0.002

Percentile

53.6%

JSON

Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.

CNA Affected

[
  {
    "product": "Quiz And Survey Master",
    "vendor": "ExpressTech",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 7.3.7"
      }
    ]
  }
]