2 matches found
CVE-2014-2091
ATutor 2.1.1 is affected by CVE-2014-2091: a cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php that allows remote authenticated administrators to inject arbitrary script/HTML via the title parameter in an add_forum action. The issue is exploitable by those with...
3.5CVSS5.5AI score0.01267EPSS
SaveExploits2References2Affected Software1
20