| Package | Affected versions | Patched versions |
|---|---|---|
| atutor | ≤ 2.2.4 |
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free