Stored Cross-Site Scripting Vulnerability in TomExam

TomExam is a web-based exam system that runs in both public and LAN environments, creates question banks and organizes exams. A stored cross-site scripting vulnerability exists in TomExam. An attacker can exploit the vulnerability to obtain an administrator cookie...