Quiz And Survey Master
ExpressTech Systems
Developer
10.3.3
Latest version
40,000
Installations
No date
Last updated
Vulnerability history
0 present
42 fixed
12 Mitigation rules
- Broken Access Control vulnerability<= 10.3.2Nov 30, 2025
- PHP Object Injection Vulnerability<= 10.2.5Sep 3, 2025
- Template Creation via CSRF vulnerability< 10.2.3Aug 14, 2025
- SQL Injection Vulnerability<= 10.2.4Aug 14, 2025
- Author+ Stored XSS vulnerability< 9.2.1Mar 25, 2025
- Author+ Stored XSS vulnerability< 9.1.3Sep 23, 2024
- Contributor+ Stored XSS vulnerability< 9.1.1Aug 26, 2024
- Contributor+ Stored XSS vulnerability< 9.1.0Aug 5, 2024
- Contributor+ Stored XSS vulnerability< 9.0.5Jul 11, 2024
- Contributor+ Stored XSS vulnerability< 9.0.2Jul 1, 2024
- Authenticated (Contributor+) SQL Injection vulnerability<= 9.0.1Jun 7, 2024
- Cross Site Scripting (XSS) vulnerability<= 8.2.2Mar 13, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 8.1.18Dec 27, 2023
- Broken Access Control vulnerability<= 8.1.16Dec 27, 2023
- Cross Site Scripting (XSS) vulnerability<= 8.1.13Nov 16, 2023
- Cross-Site Request Forgery via 'display_results' vulnerability<= 8.1.15Sep 13, 2023
- Contributor+ Stored XSS vulnerability< 8.1.11Jul 27, 2023
- Broken Access Control vulnerability<= 8.1.10Jul 17, 2023
- Unauthenticated SQL Injection vulnerability<= 8.1.4Apr 16, 2023
- Cross Site Request Forgery (CSRF) vulnerability<= 8.0.10Feb 28, 2023
- Unauthenticated Arbitrary Media Deletion vulnerability<= 8.0.8Feb 17, 2023
- Cross Site Request Forgery (CSRF)<= 8.0.7Feb 12, 2023
- Unauth. iFrame Injection vulnerability via Paragraph and Short Answer<= 8.0.4Nov 29, 2022
- Improper Input Validation vulnerability<= 8.0.4Nov 29, 2022
- Bypass vulnerability<= 7.3.10Oct 21, 2022
- Sensitive Information Disclosure vulnerability<= 7.3.10Oct 21, 2022
- Cross-Site Scripting (XSS) vulnerability<= 7.3.10Oct 21, 2022
- Multiple Insecure direct object references (IDOR) vulnerabilities<= 7.3.6Oct 21, 2022
- Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities<= 7.3.4Oct 21, 2022
- Auth. SQL Injection (SQLi) vulnerability<= 7.3.4Oct 21, 2022
- Auth. Reflected Cross-Site Scripting (XSS) vulnerability<= 7.3.4Oct 21, 2022
- Auth. Stored Cross-Site Scripting (XSS) vulnerability<= 7.3.4Oct 21, 2022
- Insecure direct object references (IDOR) vulnerability<= 7.3.4Sep 29, 2022
- Stored Cross-Site Scripting (XSS) vulnerability<= 7.3.1Sep 13, 2021
- Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability<= 7.1.18Jun 3, 2021
- Reflected Cross-Site Scripting (XSS) vulnerability<= 7.1.17May 31, 2021
- Authenticated SQL injection (SQLi) vulnerability<= 7.1.13Mar 26, 2021
- Unauthenticated Arbitrary File Upload vulnerability<= 7.0.1Aug 29, 2020
- Authenticated Reflected Cross-Site Scripting (XSS) vulnerability<= 6.3.4Dec 15, 2019
- Authenticated Cross-Site Scripting (XSS) vulnerability<= 6.2.1Mar 12, 2019
- Multiple Vulnerabilities<= 4.7.8Dec 15, 2016
- Blind SQL Injection<= 4.4.2Jul 16, 2015