PT-2017-13801

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.3 Description A Cross-Site Scripting XSS issue was found due to insufficient filtration of data, specifically in the url variable in the /mods/ standard/rss feeds/edit feed.php endpoint. This allows an attacker to...