{"uuid": "7da53978-8a9e-49e4-9a43-2aca43c1316a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0291", "type": "seen", "source": "https://t.me/hacking_Attack/90593", "content": "Exploit Collector\nWordPress Quiz And Survey Master 8.0.8 Cross Site Request Forgery\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png \nWordPress Quiz and Survey Master plugin versions 8.0.8 and below suffer from a cross site request forgery vulnerability.\n\nSHA-256 | 078ea2f052b0bdbecbdbb86ff5abadf7af3ecef36acd21e345034b86b58c3b8e\n\nDownload\nRCE Security Advisory\nhttps://www.rcesecurity.com\n1. ADVISORY INFORMATION\n=======================\nProduct:        Quiz And Survey Master\nVendor URL:     https://wordpress.org/plugins/quiz-master-next/\nType:           Cross-Site Request Forgery (CSRF) [CWE-352]\nDate found:     2023-01-13\nDate published: 2023-02-08\nCVSSv3 Score:   6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\nCVE:            CVE-2023-0292\n2. CREDITS\n==========\nThis vulnerability was discovered and researched by Julien Ahrens from\nRCE Security.\n3. VERSIONS AFFECTED\n====================\nQuiz And Survey Master 8.0.8 and below\n4. INTRODUCTION\n===============\nQuiz and Survey Master is the easiest WordPress Quiz Plugin which can be used\nto create engaging content to drive traffic and increase user engagement.\nEverything from viral quiz, trivia quiz, customer satisfaction surveys to employee\nsurveys. This plugin is the ultimate marketing tool for your website.\n\n(from the vendor's homepage)\n5. VULNERABILITY DETAILS\n========================\nThe plugin offers the ajax action \"qsm_remove_file_fd_question\" which is used to\ndelete uploaded media contents from the WordPress instance. However, the\nfunctionality is not protected by an anti-CSRF token/nonce.\n\nSince there is no anti-CSRF token protecting this functionality, it is vulnerable\nto Cross-Site Request Forgery attacks allowing an attacker to delete uploaded\nmedia contents on behalf of the attacked user.\n\nTo successfully exploit this vulnerability, a user with the right to access the\nplugin must be tricked into visiting an arbitrary website while having an\nauthenticated session in the application.\n6. PROOF OF CONCEPT\n===================\nThe following Proof-of-Concept would delete the uploaded media with the ID \"1\":\n7. SOLUTION\n===========\nUpdate to version 8.0.9\n8. REPORT TIMELINE\n==================\n2023-01-13: Discovery of the vulnerability\n2023-01-13: Wordfence (responsible CNA) assigns CVE-2023-0291\n2023-01-18: Sent initial notification to vendor via contact form\n2022-01-18: Vendor response\n2022-01-21: Vendor releases version 8.0.9 which fixes the vulnerability\n2022-02-08: Public disclosure\n9. REFERENCES\n=============\nhttps://github.com/MrTuxracer/advisories\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:04.792132Z"}