Medium severity6.1NVD Advisory· Published Aug 17, 2021· Updated Jun 17, 2026

CVE-2020-23341

Description

A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Affected products

Atutor/Atutor2 versions
cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*range: <=2.2.4
- (no CPE)range: =2.2.4
ATutor/ATutordescription

Patches

Vulnerability mechanics

References

minhtuanact.github.io/post/reflected-xss-in-atutor-2.2.4/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000