2 matches found
Cross site scripting
A Cross-site scripting XSS vulnerability in the function encryptpassword in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...
5.8CVSS6AI score0.01499EPSS
SaveExploits2References1Affected Software1
CVE-2023-27008: Improper Neutralization of Input During Web Page Generation
A Cross-site scripting XSS vulnerability in the function encryptpassword in login.tmpl.php in ATutor 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the token parameter...
6.1CVSS5.9AI score0.01499EPSS
SaveExploits2References3
20