PT-2021-4014

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.2 Description A stored cross-site scripting issue exists, allowing an attacker to upload a malicious JavaScript payload via tce filemanager.php with a filename starting with a period. This payload would be trigger...