description: Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group.
problem types: Authenticated Stored Cross-site Scripting (XSS)
affected:
{
product: TCExam
vendor: n/a
versions:
status: affected, version: 14.2.2
}