CVE-2022-0180
CVE-2022-0180
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Jan 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and conduct arbitrary operations via a specially crafted web page.
Affected products
ExpressTech · Quiz And Survey MasterWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →