CVE-2017-14981 — Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3

Back Back to CVE browser

MEDIUM

Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3

Published Oct 2, 2017

5.4

MEDIUM

CVSS 3.0

EPSS 0.60%

Description

Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to insufficient filtration of data (url in /mods/_standard/rss_feeds/edit_feed.php). An attacker could inject arbitrary HTML and script code into a browser in the context of the vulnerable website.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.60% 0.00596

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00596

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.60% (0.00596)	46.58th	v5 (v2026.06.15)
Sep 20, 2026	0.60% (0.00596)	47.15th	v5 (v2026.06.15)
Jul 20, 2024	0.05% (0.00053)	21.85th	v3 (v2023.03.01)
May 3, 2024	0.05% (0.00053)	20.38th	v3 (v2023.03.01)
Sep 3, 2023	0.05% (0.00052)	18.34th	v3 (v2023.03.01)
Mar 7, 2023	0.07% (0.00073)	29.47th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.66% (0.00663)	18.75th	v5 (v2026.06.15)
Apr 14, 2021	0.66% (0.00663)	0.00th	v1

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090
x_refsource_CONFIRMThird Party Advisory
https://github.com/atutor/ATutor/issues/135
x_refsource_CONFIRMExploitThird Party Advisory

Link	Providers	Tags
https://github.com/atutor/ATutor/commit/9292360c8b3898d0990983269f110cef21729090		x_refsource_CONFIRMThird Party Advisory
https://github.com/atutor/ATutor/issues/135		x_refsource_CONFIRMExploitThird Party Advisory