Description
Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.
Remediation
References
Related Vulnerabilities
Drupal Other Vulnerability (CVE-2006-2831)
Python Improper Input Validation Vulnerability (CVE-2021-29921)
MySQL CVE-2021-35645 Vulnerability (CVE-2021-35645)
WordPress Plugin WP Featured Post with thumbnail 'src' Parameter Cross-Site Scripting (3.0)
Django Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-0472)