XSS Vulnerability in TCExam 14.2.2 by Invasive Technologies
CVE-2020-5750

6.1MEDIUM

Key Information:

Vendor

Tecnick

Status
Tcexam
Vendor
CVE Published:
7 May 2020

What is CVE-2020-5750?

An insufficient output sanitization vulnerability in TCExam 14.2.2 enables remote, unauthenticated attackers to carry out persistent cross-site scripting (XSS) attacks through the self-registration feature. This flaw can allow attackers to inject malicious scripts, which may compromise user data and application integrity.

Affected Version(s)

TCExam 14.2.2

References

https://www.tenable.com/security/research/tra-2020-31
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-5750 : XSS Vulnerability in TCExam 14.2.2 by Invasive Technologies