Description
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator.
Remediation
References
Related Vulnerabilities
WordPress Plugin Newsletter-Send awesome emails from WordPress Cross-Site Scripting (6.7.6)
WordPress plugin Custom Contact Forms critical vulnerability
WordPress Plugin s2Member Framework 's2_invoice' Parameter Remote Security Bypass (111105)
Moodle Other Vulnerability (CVE-2011-4586)
WordPress Plugin Redirection Multiple Cross-Site Scripting Vulnerabilities (2.2.11)