PT-2021-4018

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.5 Description A reflected cross-site scripting issue exists due to improper validation of paths provided in the f, d, and dir parameters in tce select mediafile.php. This could cause reflected XSS via unsanitized...

PT-2021-3848

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 14.8.1 Description The issue is related to incorrect rendering of files as text/html when they start with a period. This can lead to cross-site scripting attacks. An attacker could upload a malicious JavaScript payload...