ExpressTech Systems Quiz And Survey Master Missing Authorization Vulnerability

A broken access control vulnerability has been identified in the ExpressTech Systems Quiz And Survey Master plugin, specifically in versions through 10.3.3. This vulnerability arises from missing authorization checks, which can allow users with lower privileges to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability could lead to unauthorized users gaining access to restricted functionalities or data, potentially allowing them to perform actions that should be reserved for users with higher privileges.

Remediation

Users of the Quiz And Survey Master plugin should update to version 10.3.4 or later to address this vulnerability.