EUVD-2021-20843

Malware in sbrugna...

Cross site scripting

Cross Site Scripting XSS vulnerability in TomExam 3.0 via pname parameter to list.thtml...

CVE-2021-34181

The connected documents confirm CVE-2021-34181 is a Cross Site Scripting (XSS) vulnerability in TomExam 3.0 exploitable via the p_name parameter passed to list.thtml. The root cause is an input handling/output encoding weakness that allows script injection. Affected software is TomExam 3.0; no ex...