CVE-2019-7172

A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-01-29

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Atutor (Atutor)

References

• https://github.com/atutor/ATutor/issues/164