Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2022-50896

Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)

Description

Testa 3.5.1 contains a reflected cross-site scripting vulnerability in the login.php redirect parameter that allows attackers to inject malicious scripts. Attackers can craft a specially encoded payload in the redirect parameter to execute arbitrary JavaScript in victim's browser context.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Testa Testa

  • 3.5.1affected

References