Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24181

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

Description

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Tutor LMS – eLearning and online course solution

  • 1.7.7 to < 1.7.7affected

References