Input validation vulnerability in Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress 6.4.12

The Quiz and Survey Master plugin for WordPress can be vulnerable to a type of security attack called ‘Stored Cross-Site Scripting’. This type of attack can occur in versions of the plugin up to and including 6.4.12. It can happen when someone with malicious intent is able to inject scripts into a page which can then run whenever someone visits the page. This happens because the plugin does not correctly sanitize the inputs it receives, nor does it escape the output properly.