213 matches found
Cross site scripting
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...
Cross site scripting
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...
Cross site scripting
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted operator...
Cross site scripting
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...
Cross site scripting
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...
CVE-2020-5750
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...
CVE-2020-5749
TCExam 14.2.2 is affected by insufficient output sanitization, enabling remote, authenticated attackers to perform persistent cross-site scripting by creating specially crafted groups. The issue is documented across multiple sources (NVD/Red Hat etc.) with impact described as persistent XSS; no s...
CVE-2020-5749
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted group...
CVE-2020-5751
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted operator...
CVE-2020-5748
CVE-2020-5748 affects Tecnick.com TCExam, specifically version 14.2.2, with a vulnerability in the self-registration flow due to insufficient output sanitization that enables a remote, unauthenticated attacker to perform persistent cross-site scripting (XSS). The connected sources corroborate a c...
CVE-2020-5748
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting XSS attacks via the self-registration feature...
CVE-2020-5746
Summary: CVE-2020-5746 is a vulnerability in Tecnick.com TCExam (version 14.2.2) characterized by insufficient output sanitization that enables a remote, authenticated attacker to perform persistent cross-site scripting (XSS) by crafting a test. Affected component: TCExam web application (TCExam ...
CVE-2020-5746
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...
CVE-2020-5747
TCExam 14.2.2 contains a cross-site scripting (XSS) vulnerability due to insufficient output sanitization. A remote, authenticated attacker can create a crafted test to persist XSS. No patch/firmware version or remediation is detailed in the provided documents.
CVE-2020-5747
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting XSS attacks by creating a crafted test...
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
No nonce protection on form submissions leading to CSRF and no input/output sanitization allowing for XSS when CSRF is exploited. PoC...
CVE-2019-16931
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers...
Cross site scripting
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers...
CVE-2019-16931
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers...
