Description
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | TCExam | 14.2.2 | — |