PT-2022-10600 · Expresstech · Expresstech Quiz/Survey Master

·

CVE-2021-36906

·

Published

2022-11-03

·

Updated

2022-11-04

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master plugin versions prior to 7.3.7
Description The issue concerns Multiple Insecure Direct Object References (IDOR) vulnerabilities.
Recommendations For ExpressTech Quiz And Survey Master plugin versions prior to 7.3.7, update to version 7.3.7 or later to resolve the issue.

Fix

IDOR

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-36906

Affected Products

Expresstech Quiz/Survey Master