CVE-2022-0182: 
WordPress vulnerability analysis and mitigation

CVE-2022-0182 is a stored cross-site scripting (XSS) vulnerability affecting Quiz And Survey Master WordPress plugin versions prior to 7.3.7. The vulnerability was discovered and reported by Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. to IPA, and was disclosed on January 12, 2022 (JVN Report).

The vulnerability is classified as a stored cross-site scripting (CWE-79) issue. According to the CVSS v3.0 scoring system, it has a base score of 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), indicating moderate severity. The vulnerability requires low privilege level and user interaction to be exploited (JVN Report).

When successfully exploited, the vulnerability allows an arbitrary script to be executed on the web browser of users who access a website that uses the affected Quiz And Survey Master plugin. This could potentially lead to unauthorized access to user data or manipulation of website content (JVN Report).

Users are advised to update their Quiz And Survey Master plugin to version 7.3.7 or later to address this vulnerability. The update contains security fixes that prevent the stored XSS attack (JVN Report).