CVE-2021-24181CWE-89

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01253 · 69.2th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct
    cvelistv5