Cross-Site Scripting Flaw in ATutor by THe ATutor Group
CVE-2014-2091
Currently unrated
What is CVE-2014-2091?
A Cross-site scripting (XSS) vulnerability exists in ATutor 2.1.1, affecting the admin interface at mods/_standard/forums/admin/forum_add.php. This flaw allows remote authenticated administrators to inject arbitrary web scripts or HTML through the title parameter in an add_forum action. The implications of this vulnerability may extend beyond administrative privilege boundaries, potentially impacting the overall security of the ATutor system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
