CVE-2026-97289

An unauthenticated Cross Site Scripting (XSS) vulnerability in Quiz And Survey Master versions up to 11.2.6 allows attackers to inject malicious scripts into web pages viewed by users, potentially leading to session hijacking or data theft. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation, especially those handling sensitive user information.