CVE-2021-36905 : What You Need to Know

WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities were discovered in the Quiz And Survey Master plugin. Learn more about the impact, technical details, and mitigation steps below.

Understanding CVE-2021-36905

Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress.

What is CVE-2021-36905?

CVE-2021-36905 refers to Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities found in the Quiz And Survey Master plugin <= 7.3.4 for WordPress, allowing attackers to execute malicious scripts on the target user's browser.

The Impact of CVE-2021-36905

The impact of this vulnerability is deemed medium with a CVSS base score of 5.4, posing a risk of low confidentiality and integrity impact.

Technical Details of CVE-2021-36905

Find out more about the vulnerability description, affected systems and versions, as well as the exploitation mechanism.

Vulnerability Description

The vulnerability allows authenticated attackers (contributor+) to store malicious scripts via the Quiz And Survey Master plugin, potentially leading to the execution of arbitrary code in users' browsers.

Affected Systems and Versions

The vulnerability affects ExpressTech's Quiz And Survey Master plugin version <= 7.3.4 for WordPress.

Exploitation Mechanism

Attackers with contributor+ privileges can exploit the vulnerability by injecting malicious scripts through the plugin, which may get executed in users' browsers.

Mitigation and Prevention

Discover the immediate steps to take, long-term security practices, and the importance of patching and updates to protect against CVE-2021-36905.

Immediate Steps to Take

Users are advised to update the Quiz And Survey Master plugin to version 7.3.5 or higher to mitigate the risk of exploitation.

Long-Term Security Practices

Ensure regular security audits, restrict user privileges, and educate users on safe browsing habits to enhance overall security posture.

Patching and Updates

Stay proactive with security updates, patches, and security best practices to prevent future vulnerabilities and safeguard your WordPress environment.