CVE-2021-25017

2022-01-2408:15:09

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CPENameOperatorVersion
tutoreq1.4.8
tutoreq1.8.6
tutoreq1.6.9
tutoreq1.4.1
tutoreq1.0.5
tutoreq1.3.0
tutoreq1.9.8
tutoreq1.8.1
tutoreq1.2.11
tutoreq1.6.1