CVE-2020-14063

CVE-2020-14063 affects the WordPress TC Custom JavaScript plugin prior to 1.2.2. The vulnerability is a stored XSS in the tccj-content parameter that is displayed in the page footer and executed in visitors’ browsers. It allows unauthenticated remote attackers to inject arbitrary JavaScript. The ...