CVE-2021-24185

The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.

Affected products

Tutor Lms

Themeum Tutor Lms

< 1.7.7

Fix

Available

CVSS 3.1

6.5 MEDIUM

EPSS

1.3% (67th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2021-04-05