Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24242

Tutor LMS < 1.8.8 - Authenticated Local File Inclusion

Description

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Themeum Tutor LMS – eLearning and online course solution

  • 1.8.8 to < 1.8.8affected

References