Security Advisory

CVE-2021-24186

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-05 18:27:45
Last updated 2024-08-03 19:21:18
Assigner WPScan
State PUBLISHED

Description

The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.