WordPress · Quiz/Survey Master · CVE-2023-3575
**Name of the Vulnerable Software and Affected Versions**
The Quiz And Survey Master WordPress plugin versions prior to 8.1.11
**Description**
The issue is related to the improper sanitization and escaping of question titles, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks.
**Recommendations**
For versions prior to 8.1.11, update to version 8.1.11 or later to resolve the issue. As a temporary workaround, consider restricting the Contributor role and above from accessing the question title feature until a patch is available.