CVE Database /
CVE-2024-43231
CVE · Medium
CVE-2024-43231 — Tutor LMS – eLearning and online course solution [tutor] < 2.7.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-43231
|
Tutor LMS – eLearning and online course solution [tutor] < 2.7.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 2.7.4
|
2.7.4 |
2024-08-09 |
—
|
CVE-2024-43231
The Tutor LMS plugin for WordPress is susceptible to a stored cross-site scripting vulnerability affecting versions through 2.7.3. The flaw stems from inadequate sanitization of user inputs and improper escaping of outputs, allowing attackers with instructor privileges or higher to embed malicious scripts into pages. When other users visit these compromised pages, the injected code executes in their browsers. The issue was resolved in version 2.7.4.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings