What’s Vulnerable › Vulnerabilities

CVE-2017-14981

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-03 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website.

Affected products

• ATutor: through 2.2.2

References

• https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090
• https://github.com/atutor/ATutor/issues/135
• https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090
• https://github.com/atutor/ATutor/issues/135

Get alerted when CVE-2017-14981 or the next vulnerability affects your stack