Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker vulnerabilities

Product

Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

by expresstech · last CVE Oct 10, 2026

CVEs

On KEV

7.2

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 3Low 0

Severity

Exploitation

Watch

Add Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-96558	7.2	0%	Oct 10	Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter Affected: through 11.2.6
CVE-2026-15963	6.5	0%	Aug 16	Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option Affected: through 11.2.1
CVE-2026-13767	6.5	0%	Jul 16	Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter Affected: through 11.2.0
CVE-2026-11780	6.4	0%	Aug 16	Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter Affected: through 11.2.1