TC
Product
TCExam
by Tecnick · last CVE Mar 15, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 16Low 2
Watch

Add TCExam to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6554
6.5
1%
Jan 11
Missing authorisation in TCExam
Affected: before 15.1.0
CVE-2025-23175
6.1
0%
Apr 22
Tecnick - Multiple XSS (CWE-79)
Affected: 16.3.2
CVE-2021-20116
6.1
1%
Aug 5
A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4
Affected: through 14.8.4
CVE-2021-20115
6.1
1%
Aug 5
A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3
Affected: through 14.8.3
CVE-2020-5750
6.1
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration…
Affected: 14.2.2
CVE-2020-5748
6.1
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration…
Affected: 14.2.2
CVE-2018-13422
6.1
1%
Jul 7
TCExam before 14.1.2 has XSS via an ff_ or xl_ field
Affected: before 14.1.2
CVE-2021-20112
5.4
1%
Jul 30
A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1
Affected: through 14.8.1
CVE-2021-20111
5.4
1%
Jul 30
A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1
Affected: through 14.8.1
CVE-2020-5751
5.4
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator
Affected: 14.2.2
CVE-2020-5749
5.4
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group
Affected: 14.2.2
CVE-2020-5747
5.4
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test
Affected: 14.2.2
CVE-2020-5746
5.4
1%
May 7
Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test
Affected: 14.2.2
CVE-2021-20113
5.3
1%
Jul 30
An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1
Affected: through 14.8.1
CVE-2020-5744
4.9
1%
May 7
Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk
Affected: 14.2.2
CVE-2020-5743
4.3
1%
May 7
Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission
Affected: 14.2.2
Showing 16