ATutor

Products

Product	CVEs	Exploited	Latest
ATutor	16	–	Aug 20, 2026

CVE-2026-64972 Medium 4.8 Reflected XSS in ATutor 0.4%
CVE-2026-64971 Medium 4.8 Reflected XSS in ATutor 0.5%
CVE-2026-64970 Medium 5.1 Stored XSS in ATutor 0.5%
CVE-2026-64969 Medium 5.3 Insecure Direct Object Reference in ATutor 0.4%
CVE-2026-64968 Medium 5.1 Server-Side Request Forgery in ATutor 0.4%
CVE-2026-64967 Medium 6.9 Path Traversal in ATutor 0.5%
CVE-2026-64966 High 8.7 Path Traversal leading to Remote Code Execution in ATutor 0.7%
CVE-2026-64965 Medium 5.3 Missing Authorization Check in ATutor 0.4%
CVE-2026-64964 Medium 6.3 Generation of Predictable Email Confirmation Token in ATutor 0.4%
CVE-2026-64963 Low 2.3 Path Traversal in ATutor 0.5%
CVE-2026-64962 Medium 5.1 Cross-Site Request Forgery (CSRF) in ATutor 0.2%
CVE-2026-64961 Medium 6.3 Authentication Bypass in ATutor 0.5%
CVE-2026-64960 High 8.7 Remote Code Execution via Unrestricted File Upload in ATutor 0.6%
CVE-2026-6956 Medium 5.1 Reflected XSS in ATutor 0.4%
CVE-2026-6909 Medium 5.1 Reflected XSS in ATutor 0.4%
CVE-2020-37147 High 7.1 ATutor 2.2.4 - 'id' SQL Injection 0.3%