← back
CVE-2021-24181

Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct

EPSS 1.3%CWE-89
The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →