PT-2019-18452

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.5 Description A stored-self XSS issue exists, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to the "/mods/ core/users/admins/my edit.php" API endpoint. Recommendations For...