Description
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator.
Remediation
References
Related Vulnerabilities
WordPress Plugin N-Media Website Contact Form with File Upload Arbitrary File Upload (1.3.4)
Django Cleartext Transmission of Sensitive Information Vulnerability (CVE-2019-12781)
WordPress Plugin Travelpayouts:All Travel Brands in One Place Cross-Site Request Forgery (1.0.16)
WordPress Plugin WooCommerce PayPal Checkout Payment Gateway Parameter Tampering (1.6.8)
Chart.js Improper Input Validation Vulnerability (CVE-2020-7746)