CVE-2021-24186CWE-89

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
69.3
In the wild
Unconfirmed
What it is

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01253 · 69.3th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2021-04-05T18:27Z
EPSS history
Timeline
  • 05 APR 18:27Z
    Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id
    cvelistv5