GCVE - cpe:2.3:a:tc_custom_javascript_project:tc_custom

Approved changes feed: RSS · Atom

cpe:2.3:a:tc_custom_javascript_project:tc_custom_javascript:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Tc Custom Javascript Project (`113f54ea-beea-503c-b464-15caf2ab73f4`)
Product	Tc Custom Javascript (`44e1b1e3-827a-535d-b2a6-1b4ae80bb8cd`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-14063`	vulnerable	2026-06-08 05:18:01.992990	Details available A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter. This is displayed in the page footer of every front-end page and executed in the browser of visitors. Published: 2020-07-21T17:12:21.000Z Updated: 2024-08-04T12:32:14.681Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/tc-custom-javascript/#developers https://www.wordfence.com/blog/2020/07/high-severity-vulnerability-patched-in-tc-custom-javascript/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.