Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbRamuel GallWPVDB-ID:F75D4329-8F4D-41B3-8ACB-70FF390636D9
HistoryJul 21, 2020 - 12:00 a.m.

TC Custom JavaScript < 1.2.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

2020-07-2100:00:00
Ramuel Gall
wpscan.com
10

0.001 Low

EPSS

Percentile

46.5%

JSON

A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.

CPENameOperatorVersion
tc-custom-javascriptlt1.2.2

Related

patchstack 1
prion 1
openvas 1
cvelist 1
nvd 1
cve 1
patchstack
patchstack
WordPress TC Custom JavaScript plugin <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
2020-07-21 00:00:00
prion
prion
Cross site scripting
2020-07-21 18:15:00
openvas
openvas
WordPress TC Custom JavaScript Plugin < 1.2.2 XSS Vulnerability
2020-08-05 00:00:00
cvelist
cvelist
CVE-2020-14063
2020-07-21 17:12:21
nvd
nvd
CVE-2020-14063
2020-07-21 18:15:19
cve
cve
CVE-2020-14063
2020-07-21 18:15:19

0.001 Low

EPSS

Percentile

46.5%

JSON
Related for WPVDB-ID:F75D4329-8F4D-41B3-8ACB-70FF390636D9
patchstack1prion1openvas1cvelist1nvd1cve1