Description Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2. Remediation References CVE-2015-6521 Related Vulnerabilities MySQL CVE-2019-2580 Vulnerability (CVE-2019-2580) WordPress Plugin Fetch Tweets Unspecified Vulnerability (1.3.3.6) WordPress Plugin AccessPress Social Counter includes Backdoor [Only if downloaded via the vendor website] (1.9.1) Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-25602) WordPress Plugin NextCellent Gallery-NextGEN Legacy Cross-Site Scripting (1.9.17) Severity Medium Classification CVE-2015-6521 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities