Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24184

Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Tutor LMS – eLearning and online course solution

  • 1.7.7 to < 1.7.7affected

References