The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/20f3e63a-31d8-49a0-b4ef-209749feff5c | Exploit Third Party Advisory |
Configurations
History
07 Nov 2023, 03:31
Type | Values Removed | Values Added |
---|---|---|
Summary | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file |
30 Apr 2021, 13:14
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://wpscan.com/vulnerability/20f3e63a-31d8-49a0-b4ef-209749feff5c - Exploit, Third Party Advisory | |
CPE | cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:* | |
CVSS |
v2 : v3 : |
v2 : 5.5
v3 : 3.8 |
22 Apr 2021, 21:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-04-22 21:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-24242
Mitre link : CVE-2021-24242
CVE.ORG link : CVE-2021-24242
JSON object : View
Products Affected
themeum
- tutor_lms
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')