3 matches found
Cross site scripting
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/core/users/admins/myedit.php...
4.3CVSS6AI score0.00865EPSS
SaveExploits1References1Affected Software1
20