Description
The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Tutor LMS – eLearning and online course solution | 1.8.3 – < 1.8.3 | 1.8.3 |