What’s Vulnerable › Products

expresstech Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your expresstech Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker version is affected

Latest expresstech Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker vulnerabilities

• CVE-2026-96558 — Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter (CVSS 7.2)
• CVE-2026-15963 — Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option (CVSS 6.5)
• CVE-2026-11780 — Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter (CVSS 6.4)
• CVE-2026-13767 — Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter (CVSS 6.5)