ATutor – Multiple Cross-Site Scripting (XSS)

[atutor]

ATutor – Multiple Cross-Site Scripting (XSS)

[bestshow]

@fgeek Thanks,this vulnerability was assigned CVE-2017-6483.

[bestshow]

@fgeek This issue is on version 2.2.2, and the patch 19b4164 fixed it.

[atutor]

working on it, thx

[atutor]

Issue is now patched
19b4164

In your report "upgrade to ATutor 2.2.3, or apply patch 0008 to ATutor 2.2.2 using the Patcher."

Won't patch earlier versions.

[fgeek]

@bestshow Can you verify the fix? Does this vulnerability have CVE identifier?

[bestshow]

@fgeek Yes,this vulnerability was fixed.

[fgeek]

@bestshow In what version? CVE should be requested if none is available. I can request it.

[fgeek]

@bestshow In what version or commit was this fixed? CVE talks about 2.2.2 and it's latest.