CVE-2021-24183CWE-89

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

published April 5, 2021

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01742 · 77.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form
    cvelistv5