2 matches found
CVE-2018-13422
TCExam before 14.1.2 has XSS via an ff or xl field...
CVE-2018-13422: Improper Neutralization of Input During Web Page Generation