| Package | Affected versions | Patched versions |
|---|---|---|
| quiz and survey master | < 9.0.2 | 9.0.2 |
The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_delete_question_from_database AJAX action, leading to a SQL injection exploitable by Contributors and above role
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free