Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.

Remediation

References

CVE-2012-4602

Related Vulnerabilities

Magento CVE-2019-8122 Vulnerability (CVE-2019-8122)

WordPress Plugin IMPress for IDX Broker Cross-Site Scripting (3.0.5)

WordPress Plugin WP Realtime Sitemap Multiple Unspecified Vulnerabilities (1.5.5)

WordPress Plugin WP Statistics Cross-Site Scripting (12.0.5)

WordPress Plugin Custom Post Type Relations Cross-Site Scripting (1.0)

Severity

Medium

Classification

CVE-2012-4602 CWE-707

Tags

Missing Update Known Vulnerabilities