medium5.4
CVE-2020-5749
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating …
Impact
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tecnick | Tcexam | Version 14.2.2 |