cleantalk
Vulnerabilities and Security Researches

Tutor LMS – eLearning and online course solution, CVE-2021-24186

CVE, Research URL

CVE-2021-24186

Published on
Apr 06, 2021
Research Description
The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.
Affected versions
Min -, max 1.8.3.
Status
vulnerable