CVE-2024-6879

PoC —

CVSS 3.1

4.7 medium

EPSS

<1%p37

Published

Aug 26, 2024 (Aug 26, 2024)

Modified

Jun 17, 2026

Description

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is embedded, which could allows contributor and above roles to perform Stored Cross-Site Scripting (XSS) attacks.

Vendors: expresstech
Products: quiz and survey master
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.