Description Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2. Remediation References CVE-2015-6521 Related Vulnerabilities Chamilo Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-38745) osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-7193) WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (5.7.19) WordPress Plugin NewsPlugin Cross-Site Request Forgery (1.0.18) WordPress Plugin Simple Post Cross-Site Scripting (1.1) Severity Medium Classification CVE-2015-6521 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities