Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation
25Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck.
ssvc Attendepss 1.4%
da publicação à arma
Publicada no NVD5 de abr.
VulnCheck+646d
probabilidade de exploração
1.4%top 29% das CVEs
exploração observada
simVulnCheck
Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions.
Produtos afetados
Unknown · Tutor LMS – eLearning and online course solution