WordPress Plugin Vulnerabilities
Quiz And Survey Master < 7.3.7 - CSRF
Description
The plugin is lacking nonce check, which could allow attacker to make logged users perform unwanted actions via a CSRF attack
Affects Plugins
Fixed in 7.3.7 References
Classification
Type
CSRF
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Daiki Sueyoshi
Verified
No
WPVDB ID
Timeline
Publicly Published
2022-01-12 (about 4 years ago)
Added
2022-01-12 (about 4 years ago)
Last Updated
2022-04-09 (about 3 years ago)
WPScan 