CVE-2026-48867

7th percentile - higher than 7% of all known CVEs

Versions of Quiz And Survey Master <= 11.1.2 are vulnerable to unauthenticated Cross Site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts, potentially leading to user data theft.

The risk to the organization includes the potential for session hijacking and theft of sensitive information. If exploited, an attacker could gain access to users' personal data.

It is recommended to update the Quiz And Survey Master plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable.