CVE-2012-4238

Description

Cross-site scripting (XSS) vulnerability in admin/code/tce_edit_answer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question_subject_id parameter.

References

http://tcexam.git.sourceforge.net/git/gitweb.cgi?p=tcexam/tcexam%3Bh=edf6e08622642f1b2421f4355d98250d9e1b0742

http://secunia.com/advisories/50141

http://freecode.com/projects/tcexam/releases/347125

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS