CVE-2021-20115
Assigner: tenable
Published: 2021-08-05T20:38:20
State: PUBLISHED
affected: product: TCExam
vendor: n/a
versions: status: affected
version: <= 14.8.3
descriptions: value: A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_filemanager.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link which, if triggered by an administrator, could result in the attacker hijacking the victim's session or performing actions on their behalf.
problemTypes: descriptions: description: Reflected Cross-Site Scripting
type: text