TI-2020-11015 CVE-2020-14063 · GHSA-vqj7-7v57-m3xhA stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin…Priority LOW 30A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-content parameter.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01367 · Published 2020-07-21 · No fix listed CWE-79