CVE-2020-5746: XSS
First published: Thu May 07 2020(Updated: )
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.
Credit: vulnreport@tenable.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tecnick Tcexam | =14.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2020-5746.
What is the affected software for this vulnerability?
The affected software for this vulnerability is TCExam version 14.2.2.
What type of vulnerability does CVE-2020-5746 have?
CVE-2020-5746 is a persistent cross-site scripting (XSS) vulnerability.
How can an attacker exploit this vulnerability?
An attacker can exploit CVE-2020-5746 by creating a crafted test that triggers the XSS attack.
What is the severity rating for CVE-2020-5746?
CVE-2020-5746 has a severity rating of medium with a CVSS score of 5.4.
- collector/nvd-index
- vendor/tecnick
- canonical/tecnick tcexam
- version/tecnick tcexam/14.2.2