PT-2021-4033

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.4 Description A reflected cross-site scripting issue exists due to improper validation of the paths provided in the f, d, and dir parameters in tce filemanager.php. This could cause reflected XSS via the unsanitiz...

PT-2021-4014

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.2 Description A stored cross-site scripting issue exists, allowing an attacker to upload a malicious JavaScript payload via tce filemanager.php with a filename starting with a period. This payload would be trigger...