Lucene search
WpvulndbWPVDB-ID:DE7D8179-1316-4D23-98E7-C1A77B749C96HistoryDec 11, 2023 - 12:00 a.m.
Tutor LMS < 2.3.0 - Admin+ Stored XSS
2023-12-1100:00:00
wpscan.com
4
tutor lms
stored xss
admin privilege
cross-site scripting
multisite
Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 2.3.0 |
Related
prion
prion
Cross site scripting
2023-12-15 16:15:00
cve
cve
CVE-2023-49829
2023-12-15 16:15:45
osv
osv
CVE-2023-49829
2023-12-15 16:15:45
cvelist
cvelist
nvd
nvd
CVE-2023-49829
2023-12-15 16:15:45
wordfence
wordfence
5.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.2%
Related for WPVDB-ID:DE7D8179-1316-4D23-98E7-C1A77B749C96