AContent is an open source learning content authoring system and respository used to create interoperable, accessible, adaptive Web-based learning content. It can be used along with learning management systems to develop, share, and archive learning materials.
AContent suffers from a stored cross-site scripting vulnerability. Input thru the POST parameter 'category_name' in '/course_category/index.php' is not sanitized allowing the attacker to execute HTML code into user's browser session on the affected site. Auth needed for script insertion.