High severity8.8NVD Advisory· Published Jan 17, 2022· Updated Jun 17, 2026
CVE-2022-0180
CVE-2022-0180
Description
Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:*range: <7.3.7
- (no CPE)range: versions prior to 7.3.7
- Range: <7.3.7
- Range: <7.3.7
Patches
Vulnerability mechanics
References
3- jvn.jp/en/jp/JVN72788165/index.htmlnvdThird Party Advisory
- wordpress.org/plugins/quiz-master-next/nvdVendor Advisory
- quizandsurveymaster.comnvdProduct
News mentions
0No linked articles in our index yet.