CVE-2021-34181

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

Stored Cross-Site Scripting Vulnerability in TomExam

TomExam is a web-based exam system that runs in both public and LAN environments, creates question banks and organizes exams. A stored cross-site scripting vulnerability exists in TomExam. An attacker can exploit the vulnerability to obtain an administrator cookie...