CVE-2025-9318

Name of the Vulnerable Software and Affected Versions Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress versions through 10.3.1

Description The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is susceptible to time-based SQL Injection. This is due to inadequate escaping of user-supplied input and insufficient preparation of existing SQL queries, specifically affecting the is linking parameter. Authenticated attackers with Subscriber-level access or higher can exploit this to append additional SQL queries, potentially extracting sensitive information from the database.

Recommendations Update Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress to a version later than 10.3.1.