CVE-2026-64970 | ATutor 2.2.4 Registration phone cross site scripting

August 20, 2026 Yanac

A vulnerability classified as problematic has been found in ATutor 2.2.4. This issue affects some unknown processing of the component Registration. The manipulation of the argument phone leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is traded as CVE-2026-64970. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More