{
 "id": "WPSEC-2026-2226",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2226/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2226/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2226/index.md",
 "title": "Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.9 - Authenticated (Contributor+) SQL Injection via Quiz Page Data ('qpages')",
 "description": "The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the stored quiz page data ('qpages') in all versions up to, and including, 11.2.9 due to insufficient sanitization of question IDs saved through the questions tab and insufficient preparation of the query that later places them into an IN() clause when the quiz is rendered. This makes it possible for authenticated attackers, with Contributor-level access and above, to store an SQL payload that is executed when the quiz is displayed, allowing them to append additional SQL queries to existing queries and extract sensitive information from the database.",
 "plugin": {
  "slug": "quiz-master-next",
  "name": "Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker",
  "full_name": "Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker",
  "wordpress_org": "https://wordpress.org/plugins/quiz-master-next/",
  "advisories_url": "https://wpsec.com/vuln/plugin/quiz-master-next/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/quiz-master-next"
 },
 "type": "SQLI",
 "cwe": [
  "CWE-89"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 6.5,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "11.3.0",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 11.3.0"
  ]
 },
 "introduced_in": null,
 "fixed_in": "11.3.0",
 "remediation": "Update to 11.3.0 or later.",
 "fix_released": "2026-11-02T13:03:03+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:20:31.832434+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2226/",
  "https://plugins.svn.wordpress.org/quiz-master-next/tags/11.3.0/",
  "https://wordpress.org/plugins/quiz-master-next/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/quiz-master-next",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-03"
 }
}