ATutor 2.2 Cross Site Scripting Vulnerability

ATutor versions 2.2 and below suffer from a cross site scripting vulnerability. -------------------------------------------------------------------------- ATutor printHelps$h; User input passed through the "h" GET parameter is not properly sanitized before being passed to the "Message::printHelps...