expresstech quiz and survey master

Name: expresstech quiz and survey master
Brand: expresstech

productUS

cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

4critical9high18medium0low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-35951US	critical9.9OT high	76.3% (100th)	—	7.0.1	2021-01-01	< 7.0.1
CVE-2020-35949US	critical9.8	5.15% (92nd)	—	7.0.1	2021-01-01	< 7.0.1
CVE-2021-20792US	medium6.1	2.92% (87th)	—	7.1.14	2021-08-18	< 7.1.14
CVE-2023-0291US	critical9.1OT elevated	2.03% (81st)	—	no fix	2023-06-09	≤ 8.0.8
CVE-2021-24221US	high8.8	1.89% (79th)	—	7.1.12	2021-04-12	< 7.1.12
CVE-2019-17599US	medium6.1	1.66% (77th)	—	6.3.5	2019-12-13	< 6.3.5
CVE-2022-0181US	medium6.1	1.28% (70th)	—	7.3.7	2022-01-17	< 7.3.7
CVE-2021-36898US	high7.2	1.08% (65th)	—	no fix	2022-10-28	≤ 7.3.4
CVE-2016-11085US	medium6.5	1.02% (63rd)	—	4.7.9	2020-08-16	< 4.7.9
CVE-2022-0182US	medium5.4	0.97% (62nd)	—	7.3.7	2022-01-17	< 7.3.7
CVE-2021-24368US	medium6.1	0.83% (57th)	—	7.1.18	2021-06-20	< 7.1.18
CVE-2023-0292US	high8.1	0.79% (56th)	—	no fix	2023-06-09	≤ 8.0.8
CVE-2022-4032US	medium6.1	0.79% (56th)	—	no fix	2022-11-29	≤ 8.0.4
CVE-2022-41652US	critical9.8	0.76% (55th)	—	7.3.11	2022-11-18	< 7.3.11
CVE-2022-42883US	high7.5	0.74% (54th)	—	no fix	2022-11-18	≤ 7.3.10
CVE-2022-4033US	medium5.3	0.73% (54th)	—	no fix	2022-11-29	≤ 8.0.4
CVE-2022-0180US	high8.8	0.65% (51st)	—	7.3.7	2022-01-17	< 7.3.7
CVE-2021-24691US	medium4.8	0.62% (50th)	—	7.3.2	2021-10-11	< 7.3.2
CVE-2021-36906US	high8.8	0.59% (48th)	—	no fix	2022-11-03	≤ 7.3.6
CVE-2024-5606US	high8.8	0.59% (48th)	—	9.0.2	2024-07-02	< 9.0.2
CVE-2021-36863US	medium5.4	0.59% (48th)	—	no fix	2022-10-28	≤ 7.3.4
CVE-2023-3575US	medium5.4	0.55% (46th)	—	8.1.11	2023-08-07	< 8.1.11
CVE-2021-36864US	medium5.4	0.51% (43rd)	—	no fix	2022-10-28	≤ 7.3.4
CVE-2024-3592US	medium6.5	0.48% (41st)	—	9.0.2	2024-06-07	< 9.0.2
CVE-2021-36905US	medium5.4	0.48% (41st)	—	7.3.5	2022-11-17	< 7.3.5
CVE-2022-40698US	medium6.1	0.46% (40th)	—	7.3.11	2022-11-18	< 7.3.11
CVE-2024-6879US	—	0.43% (38th)	—	9.1.1	2024-08-26	< 9.1.1
CVE-2024-8758US	medium4.8	0.40% (34th)	—	9.1.3	2024-09-23	< 9.1.3
CVE-2022-46862US	high8.8	0.38% (32nd)	—	8.0.8	2023-02-14	< 8.0.8
CVE-2024-6025US	medium5.4	0.38% (32nd)	—	9.0.5	2024-07-11	< 9.0.5
CVE-2024-4934US	—	0.35% (29th)	—	9.0.2	2024-07-01	< 9.0.2
CVE-2024-10679US	—	0.34% (27th)	—	9.2.1	2025-03-25	< 9.2.1
CVE-2024-6390US	—	0.33% (26th)	—	9.1.0	2024-08-03	< 9.1.0
CVE-2023-51507US	medium5.3OT elevated	0.31% (24th)	—	8.1.17	2024-06-14	< 8.1.17
CVE-2023-26524US	high8.8	0.31% (24th)	—	no fix	2023-11-13	≤ 8.0.10
CVE-2025-9637US	—OT elevated	0.27% (19th)	—	10.3.2	2026-01-06	< 10.3.2
CVE-2025-9318US	—	0.26% (17th)	—	10.3.2	2026-01-06	< 10.3.2
CVE-2025-9294US	—OT elevated	0.22% (13th)	—	10.3.2	2026-01-06	< 10.3.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19 CVEs
CWE-352Cross-Site Request Forgery (CSRF)5 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-862Missing Authorization4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan