CVE-2017-14981: XSS
Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/standard/rssfeeds/editfeed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14981?
CVE-2017-14981 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS).
How do I fix CVE-2017-14981?
To fix CVE-2017-14981, upgrade to ATutor version 2.2.3 or later where the vulnerability has been patched.
What kind of attack can be executed through CVE-2017-14981?
CVE-2017-14981 allows an attacker to execute arbitrary HTML and script code in a user's browser via cross-site scripting.
Which versions of ATutor are affected by CVE-2017-14981?
CVE-2017-14981 affects ATutor versions up to and including 2.2.2.
What components of ATutor are vulnerable in CVE-2017-14981?
CVE-2017-14981 specifically affects the RSS feeds editing functionality in the file /mods/_standard/rss_feeds/edit_feed.php.