Description
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
Unscored
CVE-2019-7172
EUVD-2019-16717GHSA-vwc3-m29m-55fc
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field …
Published Jan 29, 2019 · Updated Sep 17, 2024 · Assigned by mitre