Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-125786 EUVD-2026-124149GHSA-8vg8-vvx9-gjf5

WordPress Quiz And Survey Master plugin <= 11.3.0 - Content Injection vulnerability

Published Nov 12, 2026 · Updated Nov 12, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Code Injection.This issue affects Quiz And Survey Master: from n/a through 11.3.0.

Affected products

VendorProductAffectedFixed
ExpressTech Quiz And Survey Master ≤ 11.3.0 —

References