Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Tutor LMS – eLearning and online course solution — Vulnerabilities & Security Advisories 43

All 43 CVE vulnerabilities found in Tutor LMS – eLearning and online course solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2023-49829 WordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2023-12-15
CVE-2022-2563 Tutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting CWE-79 4.8 -2022-10-17
CVE-2021-25017 Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting CWE-79 6.1 -2022-01-24
CVE-2021-24873 Tutor LMS < 1.9.11 - Reflected Cross-Site Scripting CWE-79 6.1 -2021-11-23
CVE-2021-24740 Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting CWE-79 4.8 -2021-10-18
CVE-2021-24455 Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79 5.4 -2021-08-02
CVE-2021-24242 Tutor LMS < 1.8.8 - Authenticated Local File Inclusion CWE-22 5.5 -2021-04-22
CVE-2021-24182 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_question CWE-89 6.5 -2021-04-05
CVE-2021-24183 Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form CWE-89 6.5 -2021-04-05
CVE-2021-24184 Tutor LMS < 1.7.7 - Unprotected AJAX including Privilege Escalation CWE-862 8.8 -2021-04-05
CVE-2021-24185 Tutor LMS < 1.7.7 - SQL Injection via tutor_place_rating CWE-89 6.5 -2021-04-05
CVE-2021-24186 Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_id CWE-89 6.5 -2021-04-05
CVE-2021-24181 Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correct CWE-89 6.5 -2021-04-05

All 43 known CVE vulnerabilities affecting Tutor LMS – eLearning and online course solution with full Chinese analysis, references, and POCs where available.