Security Advisory

CVE-2021-24182

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-05 18:27:45
Last updated 2024-08-03 19:21:18
Assigner WPScan
State PUBLISHED

Description

The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.