CVE-2020-5748

Summary

Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.

Affected Software

VendorProductVersion RangeStatus
n/aTCExam14.2.2affected

Weaknesses

  • Unauthenticated Stored Cross-site Scripting (XSS)

ADP Enrichment

CVE Program Container

Additional References

References