Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.

Remediation

References

CVE-2008-0828

Related Vulnerabilities

PHP version older than 4.4.1

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-5241)

Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935)

Apache Tomcat CVE-2018-1305 Vulnerability (CVE-2018-1305)

WordPress Plugin Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier) Security Bypass (9.6.1)

Severity

Medium

Classification

CVE-2008-0828 CWE-707

Tags

Missing Update Known Vulnerabilities