← back
CVE-2021-24182

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question

EPSS 1.7%CWE-89
The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →