7.6
Élevée
CVE-2025-58993 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum Tutor LMS tutor allows SQL Injection.This issue affects Tutor LMS: from n/a through <= 3.7.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tutor LMS 3.7 | premières → 3.7.4 | Pas de correctif indiqué |
Autres CVE de Tutor LMS
Les 22 CVE de Tutor LMS →
CVE-2026-111407
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
6.5
Moyenne
CVE-2026-42702
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
7.1
Élevée
CVE-2026-42698
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
5.3
Moyenne
CVE-2026-57694
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
6.5
Moyenne