Description
The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attributes in the Student Registration page, leading to a Reflected Cross-Site Scripting issue
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Tutor LMS – eLearning and online course solution | 1.9.11 – < 1.9.11 | 1.9.11 |