CVE-2020-5747

2020-05-0717:15:12

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.

CPENameOperatorVersion
tcexameq12.2.2
tcexameq12.1.29
tcexameq12.1.000
tcexameq14.0.1
tcexameq12.2.1
tcexameq14.1.3
tcexameq14.1.6
tcexameq12.1.011
tcexameq14.1.0
tcexameq12.1.004