plugin

Tc Custom Javascript Vulnerabilities

1 known security issue reported for the Tc Custom Javascript WordPress plugin. Most recent disclosed Jul 21, 2020.

1 high

Running Tc Custom Javascript on your site? Check whether your installed version is affected.

TC Custom JavaScript <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting

high

A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors.

CVSS:: 8.3
Affected:: up to 1.2.2
Fixed in:: 1.2.2
Disclosed:: Jul 21, 2020

CVE-2020-14063 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database