Skip to content
Sign in
8.1 High

CVE-2023-25800 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS allows SQL Injection.This issue affects Tutor LMS: from n/a through 2.2.0.

Affected products and versions

Product Affected versions Fixed in
Tutor LMS 2.2 earliest → 2.2.0 No fix stated
tutor_lms 2.2 earliest → 2.2.0 No fix stated

Other CVEs of Tutor LMS

The 22 CVEs of Tutor LMS →
CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 6.5 Medium CVE-2026-42702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 7.1 High CVE-2026-42698 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum… 5.3 Medium CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting… 6.5 Medium
Track this CVE