A vulnerability has been found in Quiz and Survey Master QSM Plugin up to 10.3.1 on WordPress and classified as problematic. This affects the function
qsm_dashboard_delete_result of the component Quiz Result Handler. The manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-9294. The attack can be initiated remotely. There is not any exploit available.