Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 1.7%
from disclosure to weapon
Published on NVDApr 5
VulnCheckMar 15
exploitation probability
1.7%top 24% of all CVEs
observed exploitation
yesVulnCheck
The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.
Affected products
Unknown · Tutor LMS – eLearning and online course solution