Lucene search

MitreCVELIST:CVE-2019-7172

HistoryOct 03, 2022 - 4:19 p.m.

CVE-2019-7172

2022-10-0316:19:27

mitre

www.cve.org

security vulnerability

stored xss

atutor

v2.2.4

real name field

html

javascript

admins

my_edit.php

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.

References

github.com/atutor/ATutor/issues/164