Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.

Remediation

References

CVE-2008-0828

Related Vulnerabilities

WordPress Plugin LOGOSWARE SUITE Uploader Arbitrary File Upload (1.1.6)

WordPress Plugin Video Comments Webcam Recorder Cross-Site Scripting (1.55)

WordPress Plugin TallyKit Cross-Site Scripting (5.4)

WordPress Plugin MQ ReLinks Multiple Vulnerabilities (1.8)

WordPress Plugin Flipbox Builder PHP Object Injection (1.5)

Severity

Medium

Classification

CVE-2008-0828 CWE-707

Tags

Missing Update Known Vulnerabilities