ExpressTech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Name: ExpressTech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
Brand: ExpressTech

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical1high3medium0low

updated 2026-10-27

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-0291US	critical9.1OT elevated	2.03% (81st)	—	no fix	2023-06-09	≤ 0 ≤8.0.8
CVE-2023-0292US	high8.1	0.79% (56th)	—	no fix	2023-06-09	≤ 0 ≤8.0.8
CVE-2022-4032US	medium6.1	0.79% (56th)	—	no fix	2022-11-29	≤ 0 ≤8.0.4
CVE-2022-4033US	medium5.3	0.73% (54th)	—	no fix	2022-11-29	≤ 0 ≤8.0.4
CVE-2026-5797US	—	0.52% (44th)	—	no fix	2026-04-17	≤ 0 ≤10.1.0
CVE-2026-9230US	—OT elevated	0.49% (42nd)	—	no fix	2026-07-03	≤ 0 ≤11.1.4
CVE-2024-3592US	medium6.5	0.48% (41st)	—	no fix	2024-06-07	≤ 0 ≤9.0.1
CVE-2026-9233US	—OT elevated	0.47% (41st)	—	no fix	2026-06-27	≤ 0 ≤11.1.4
CVE-2026-6448US	—	0.35% (29th)	—	no fix	2026-06-06	≤ 0 ≤11.1.2
CVE-2026-2412US	—	0.33% (26th)	—	no fix	2026-03-23	≤ 0 ≤10.3.5
CVE-2025-9637US	—OT elevated	0.27% (19th)	—	no fix	2026-01-06	≤ 0 ≤10.3.1
CVE-2025-9318US	—	0.26% (17th)	—	no fix	2026-01-06	≤ 0 ≤10.3.1
CVE-2025-9294US	—OT elevated	0.22% (13th)	—	no fix	2026-01-06	≤ 0 ≤10.3.1

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-285Improper Authorization1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.