CVE-2022-40698 - WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability

Back Back to CVE browser

MEDIUM

WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability

Published Nov 18, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.

Affected products

Vendor ExpressTech Product Quiz And Survey Master (WordPress plugin) Default
n/a
- Version
  <= 7.3.10
  Status
  affected
  Constraints
  <=7.3.10

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ExpressTech

Quiz And Survey Master (WordPress plugin)

n/a

Version	Status	Constraints
<= 7.3.10	affected	<=7.3.10

Remediation

Vendor solution

Update to 7.3.11 or higher version.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-10-cross-site-scripting-xss-vulnerability?_s_id=cve
Third Party Advisory

Link	Providers	Tags
https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-10-cross-site-scripting-xss-vulnerability?_s_id=cve		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published Nov 18, 2022

Updated Apr 28, 2026

Reserved Oct 19, 2022

Link CVE-2022-40698

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-40698

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-40698