PT-2021-11881 · WordPress · Quiz/Survey Master

Chloe Chamberland · Published 2021-01-01 · Updated 2021-07-21 · CVE-2020-35949

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

Name of the Vulnerable Software and Affected Versions: Quiz and Survey Master plugin versions prior to 7.0.1

Description: An issue in the Quiz and Survey Master plugin allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution. This is possible when a quiz question requires a file upload, and the plugin only checks the Content-Type header, allowing an attacker to upload a .php file with a text/plain Content-Type.

Recommendations: For versions prior to 7.0.1, update to version 7.0.1 or later to resolve the issue. As a temporary workaround, consider disabling file uploads for quiz questions until the update is applied. Restrict access to the plugin's upload functionality to minimize the risk of exploitation.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-35949

Affected Products

Quiz/Survey Master

References · 4

• 🔥 https://wpscan.com/vulnerability/10349 · Exploit
• 🔥 https://wordfence.com/blog/2020/08/critical-vulnerabilities-patched-in-quiz-and-survey-master-plugin · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35949 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35949 · Vendor Advisory