Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Go-redrock Component: Tutortrac Clear all filters
TI-2023-09848 CVE-2023-24081 · GHSA-vm68-972c-j826

Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac…

Priority MEDIUM 58

Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the reason and loc…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2023-02-21 No fix listed CWE-79