Skip to content
OpenAdvisories
High · 7.1 CVE-2025-68849 EUVD-2026-3984GHSA-wp7p-rxr2-rv8h

WordPress Quote Master plugin <= 7.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frank Corso Quote Master quote-master allows Reflected XSS.This issue affects Quote Master: from n/a through <= 7.1.1.

Affected products

VendorProductAffectedFixed
Frank Corso Quote Master ≤ 7.1.1 —

References