4.8
Moyenne
CVE-2022-2563 The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege…
Description
The Tutor LMS WordPress plugin before 2.0.10 does not escape some course parameters, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tutor LMS – eLearning and online course solution 2.0 | premières → < 2.0.10 | 2.0.10 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Tutor LMS – eLearning and online course solution
Les 11 CVE de Tutor LMS – eLearning and online course solution →
CVE-2021-25017
The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an…
Non notée
CVE-2021-24873
The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in…
Non notée
CVE-2021-24740
The Tutor LMS WordPress plugin before 1.9.9 does not escape some of its settings before outputting them in attributes,…
Non notée
CVE-2021-24455
The Tutor LMS – eLearning and online course solution WordPress plugin before 1.9.2 did not escape the Summary field of…
Non notée