Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-25017
HistoryJan 24, 2022 - 8:15 a.m.

Cross site scripting

2022-01-2408:15:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

30.2%

The Tutor LMS WordPress plugin before 1.9.12 does not escape the search parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CPENameOperatorVersion
tutor_lmslt1.9.12

0.001 Low

EPSS

Percentile

30.2%