← volver
CVE-2021-24186

Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id

EPSS 1.3%CWE-89
The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →