CVE-2021-25017
The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
- Affected products
- Tutor Lms
- Themeum Tutor Lms
- < 1.9.12
- Fix
- Available
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 1.0% (61th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2022-01-24
CVE-2021-25017 at NVD
1 known exploit for CVE-2021-25017
Proof-of-concept code and exploit modules indexed by Sploitus