description: Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.
problem types: Unauthenticated Stored Cross-site Scripting (XSS)
affected:
{
product: TCExam
vendor: n/a
versions:
status: affected, version: 14.2.2
}