CVE-2021-24183

CVE-2021-24183: Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

Vendor Unknown
Product Tutor LMS – eLearning and online course solution
Weakness CWE-89 · SQLi
Published April 5, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.

Key dates

02Disclosure timeline

April 5, 2021 CVE published
August 3, 2024 Record updated