VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 5, 2017· Updated May 13, 2026

CVE-2017-6483

CVE-2017-6483

Description

Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities exist due to insufficient filtration of user-supplied data passed to several pages (lang_code in themes/*/admin/system_preferences/language_edit.tmpl.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Affected products

1
  • Atutor/Atutor
    cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*
    Range: <=2.2.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.