Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form
25Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Attendepss 1.7%
da publicação à arma
Publicada no NVD5 de abr.
VulnCheck+646d
probabilidade de exploração
1.7%top 24% das CVEs
exploração observada
simVulnCheck
The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.
Produtos afetados
Unknown · Tutor LMS – eLearning and online course solution