Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Tc Custom Javascript Project Subscribe
Filtered by product Tc Custom Javascript
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-14063 1 Tc Custom Javascript Project 1 Tc Custom Javascript 2020-07-23 4.3 MEDIUM 6.1 MEDIUM
A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.