CyberRota Analysis
AI-GeneratedThe Quiz and Survey Master plugin for WordPress prior to version 11.2.4 is vulnerable due to a lack of per-object ownership checks, enabling users with contributor-level access and higher to alter the front-end text settings of quizzes created by other users. This could lead to unauthorized modifications and potential misinformation in quizzes, impacting the integrity of content. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.