CVE-2022-27854: 
WordPress vulnerability analysis and mitigation

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Alexander Ustimenko's Psychological tests & quizzes WordPress plugin versions 0.21.19 and below. The vulnerability was disclosed on April 26, 2022, and affects WordPress installations using the vulnerable plugin versions. This security issue allows authenticated users with Contributor level privileges or above to inject malicious scripts (Patchstack).

The vulnerability has been assigned CVE-2022-27854 and received a CVSS score of 5.4, indicating a medium severity level. The security flaw is classified as a Stored Cross-Site Scripting (XSS) vulnerability that requires authentication at the Contributor level or higher to exploit (Wordfence).

If exploited, this vulnerability could allow malicious actors to inject harmful scripts, including redirects, advertisements, and other HTML payloads into the website. These injected scripts would then be executed when visitors access the affected site (Patchstack).

As there is no official fix available for this vulnerability, the recommended mitigation is to completely remove the plugin from WordPress installations. The plugin has been permanently closed and is no longer available for download from the WordPress plugin repository (Patchstack).