Medium severity5.3NVD Advisory· Published Nov 29, 2022· Updated Apr 8, 2026
CVE-2022-4033
CVE-2022-4033
Description
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e. a number, file path, etc..). This makes it possible attackers to submit values other than the intended input type.
Affected products
1- cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:*Range: <=8.0.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- plugins.trac.wordpress.org/changesetnvdPatchThird Party Advisory
- www.wordfence.com/vulnerability-advisories-continued/nvdThird Party Advisory
- www.wordfence.com/threat-intel/vulnerabilities/id/9f5cc779-c7de-42e6-a812-5c0539067b8cnvd
News mentions
0No linked articles in our index yet.