CVE-2024-39645 Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Themeum Tutor LMS.This issue affects Tutor LMS: from n/a through 2.7.2.

Affected products and versions

Product	Affected versions	Fixed in
Tutor LMS 2.7	earliest → 2.7.2	No fix stated

Other CVEs of Tutor LMS

The 22 CVEs of Tutor LMS →

CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 6.5 Medium CVE-2026-42702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 7.1 High CVE-2026-42698 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum… 5.3 Medium CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting… 6.5 Medium