PT-2021-15765 · WordPress · The Quiz/Survey Master

Nguyen Van Khanh · Published 2021-04-12 · Updated 2021-04-20 · CVE-2021-24221

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress versions prior to 7.1.12

Description: The issue arises from the lack of sanitization of the result id GET parameter on pages with the [qsm result] shortcode without an id attribute. This leads to an SQL injection, allowing unauthorized access to the DBMS. The vulnerability can be exploited by authors or even unauthenticated users if the shortcode is embedded on a public page or post.

Recommendations: For versions prior to 7.1.12, update to version 7.1.12 or later to resolve the issue. As a temporary workaround, consider disabling the use of the [qsm result] shortcode without an id attribute until a patch is available. Restrict access to pages or posts with the vulnerable shortcode to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-24221

Affected Products

The Quiz/Survey Master

References · 5

• 🔥 https://wpscan.com/vulnerability/3b52b25c-82a1-41c7-83ac-92e244f7c5ab · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24221 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24221 · Vendor Advisory
• https://plugins.trac.wordpress.org/changeset/2479603 · Patch
• https://t.me/cvenotify/13497 · Telegram Post