Description
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.
Remediation
References
Related Vulnerabilities
WordPress Plugin Welcart e-Commerce Multiple SQL Injection Vulnerabilities (1.5.2)
WordPress Plugin WP Symposium SQL Injection (15.1)
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.25)
Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-6385)
WordPress Plugin Improved Sale Badges for WooCommerce Security Bypass (4.3.2)