CVE-2019-9575

The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.

• CWE-79

• https://github.com/QuizandSurveyMaster/quiz_master_next/blob/master/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/02/05/5Exploit, Mailing List, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-quiz-and-survey-master-xss/Exploit, Third Party Advisory
• https://wordpress.org/plugins/quiz-master-next/#developersProduct, Third Party Advisory
• https://github.com/QuizandSurveyMaster/quiz_master_next/blob/master/CHANGELOG.mdRelease Notes, Third Party Advisory
• https://lists.openwall.net/full-disclosure/2019/02/05/5Exploit, Mailing List, Third Party Advisory
• https://security-consulting.icu/blog/2019/02/wordpress-quiz-and-survey-master-xss/Exploit, Third Party Advisory
• https://wordpress.org/plugins/quiz-master-next/#developersProduct, Third Party Advisory

Published

Mar 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9568The "Forminator Contact Form, Poll & Quiz Builder" plugin be…6.5
• CVE-2019-9569Buffer Overflow in dactetra in Delta Controls enteliBUS Mana…
• CVE-2019-9570An issue was discovered in YzmCMS 5.2.0. It has XSS via the …
• CVE-2019-9572SchoolCMS version 2.3.1 allows file upload via the theme upl…
• CVE-2019-9573The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9574The WP Human Resource Management plugin before 2.2.6 for Wor…
• CVE-2019-9576The Blog2Social plugin before 5.0.3 for WordPress allows wp-…
• CVE-2019-9578In devs.c in Yubico libu2f-host before 1.1.8, the response t…
• CVE-2019-9579An issue was discovered in Illumos in Nexenta NexentaStor 4.…8.1
• CVE-2019-9580In st2web in StackStorm Web UI before 2.9.3 and 2.10.x befor…
• CVE-2019-9581phpscheduleit Booked Scheduler 2.7.5 allows arbitrary file u…8.8
• CVE-2019-9582eQ-3 Homematic CCU2 outdated base software packages allows D…