What is the CVSS score of CVE-2023-3575?

CVE-2023-3575 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.5%.

Is there a public PoC exploit available for CVE-2023-3575?

Yes, a public proof-of-concept exploit is available for CVE-2023-3575. Prioritise patching immediately. EPSS: 0.5%.

Quiz And Survey Master CVE-2023-3575

MEDIUM

2023-08-07 contact@wpscan.com

WordPress XSS Quiz And Survey Master

5.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Aug 07, 2023 - 15:15 nvd

MEDIUM 5.4

DescriptionNVD

AnalysisAI

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks Affected products include: Expresstech Quiz And Survey Master. Version information: before 8.1.11.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Quiz And Survey Master

View all

CVE-2024-5606 HIGH This Week POC

8.8 Jul 02

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_i

CVE-2021-24221 HIGH This Week POC

8.8 Apr 12

The Quiz And Survey Master - Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the r

CVE-2021-20792 MEDIUM This Month POC

6.1 Aug 18

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject

CVE-2021-24368 MEDIUM This Month POC

6.1 Jun 20

The Quiz And Survey Master - Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape

CVE-2019-17599 MEDIUM This Month POC

6.1 Dec 13

The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting

CVE-2019-9575 MEDIUM This Month POC

6.1 Mar 05

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS. Rated

CVE-2024-3592 CRITICAL Act Now

9.9 Jun 07

The Quiz And Survey Master - Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL I

CVE-2024-6390 MEDIUM This Month POC

5.9 Aug 03

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz s

CVE-2022-41652 CRITICAL Act Now

9.8 Nov 18

Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. Rated critical severity (CVSS 9.8), this v

CVE-2024-4934 MEDIUM This Month POC

5.5 Jul 01

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields befo

CVE-2023-0292 MEDIUM This Month POC

5.4 Jun 09

The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

CVE-2024-6025 MEDIUM This Month POC

5.4 Jul 11

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, w

Same technique XSS

View all

CVE-2017-9248 CRITICAL POC

9.8

CVE-2013-1710 CRITICAL POC

10.0

CVE-2013-7389 MEDIUM POC

4.3

CVE-2021-25299 MEDIUM POC

6.1

CVE-2014-2120 MEDIUM

6.1

CVE-2023-40000 HIGH POC

8.3

CVE-2024-52875 HIGH POC

8.8

CVE-2016-8581 MEDIUM POC

6.1

CVE-2023-3575 vulnerability details – vuln.today

Back