PT-2023-20700

CVE-2023-26524

Published

2023-11-12

Updated

2023-11-17

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions prior to 8.0.11

Description The issue is related to a Cross-Site Request Forgery (CSRF) vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.

Recommendations For versions prior to 8.0.11, update to version 8.0.11 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Rio Darmawan

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers