Description
Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Rencontre-Dating Site Security Bypass (1.6.9)
Oracle Database Server CVE-2015-4740 Vulnerability (CVE-2015-4740)
WordPress Plugin User Login Log Cross-Site Scripting (2.2.2)
MySQL CVE-2020-14680 Vulnerability (CVE-2020-14680)
WordPress Plugin Tutor LMS-eLearning and online course solution Cross-Site Scripting (1.9.1)