3 matches found
Cross site scripting
A Cross-site scripting XSS vulnerability in the function encryptpassword in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...
5.8CVSS6AI score0.01499EPSS
SaveExploits1References1Affected Software1
CVE-2023-27008
A Cross-site scripting XSS vulnerability in the function encryptpassword in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...
6.1CVSS0.01499EPSS
SaveExploits1References3
CVE-2023-27008: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability in the function encryptpassword in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...
6.1CVSS5.9AI score0.01499EPSS
SaveExploits1References3
20