{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000002.html",
  "dc:date": "2022-01-12T15:33+09:00",
  "dcterms:issued": "2022-01-12T15:33+09:00",
  "dcterms:modified": "2022-01-12T15:33+09:00",
  "description": "WordPress Plugin \"Quiz And Survey Master\" provided by ExpressTech contains multiple vulnerabilities listed below. \r\n\r\n* Cross-site request forgery (CWE-352) - CVE-2022-0180\r\n* Reflected cross-site scripting (CWE-79) - CVE-2022-0181\r\n* Stored cross-site scripting (CWE-79) - CVE-2022-0182\r\n\r\nCVE-2022-0180, CVE-2022-0181\r\nDaiki Sueyoshi reported these vulnerabilitis to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.\r\n\r\nCVE-2022-0182\r\nTsutomu Aramaki of Mitsui Bussan Secure Directions, Inc reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000002.html",
  "sec:cpe": {
    "#text": "cpe:/a:expresstech:quiz_and_survey_master",
    "@product": "Quiz And Survey Master",
    "@vendor": "ExpressTech",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "4.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "5.4",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000002",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN72788165/index.html",
      "@id": "JVN#72788165",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-0180",
      "@id": "CVE-2022-0180",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-0181",
      "@id": "CVE-2022-0181",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-0182",
      "@id": "CVE-2022-0182",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-0180",
      "@id": "CVE-2022-0180",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-0181",
      "@id": "CVE-2022-0181",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-0182",
      "@id": "CVE-2022-0182",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-352",
      "@title": "Cross-Site Request Forgery(CWE-352)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "Multiple vulnerabilities in WordPress Plugin \"Quiz And Survey Master\""
}

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000075.html",
  "dc:date": "2021-08-10T14:40+09:00",
  "dcterms:issued": "2021-08-10T14:40+09:00",
  "dcterms:modified": "2021-08-10T14:40+09:00",
  "description": "WordPress Plugin \"Quiz And Survey Master\" provided by ExpressTech contains a cross-site scripting vulnerability (CWE-79) due to the flow in handling some URL query parameters.\r\n\r\nGen Sato of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to the developer and coordinated on his own.\r\nAfter coordination was completed, this case was reported to JPCERT/CC, and JPCERT/CC coordinated with the developer for the publication.",
  "link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000075.html",
  "sec:cpe": {
    "#text": "cpe:/a:expresstech:quiz_and_survey_master",
    "@product": "Quiz And Survey Master",
    "@vendor": "ExpressTech",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "2.6",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "6.1",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2021-000075",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN65388002/index.html",
      "@id": "JVN#65388002",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20792",
      "@id": "CVE-2021-20792",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20792",
      "@id": "CVE-2021-20792",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-79",
      "@title": "Cross-site Scripting(CWE-79)"
    }
  ],
  "title": "WordPress Plugin \"Quiz And Survey Master\" vulnerable to cross-site scripting"
}