Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24183

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Tutor LMS – eLearning and online course solution

  • 1.8.3 to < 1.8.3affected

References