CVE-2024-1128 — Tutor LMS – eLearning and online course solution [tutor] < 2.6.1

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2024-1128	Tutor LMS – eLearning and online course solution [tutor] < 2.6.1	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	Low 3.5	< 2.6.1	2.6.1	2024-02-20	—

CVE-2024-1128

Update the WordPress Tutor LMS plugin to the latest available version (at least 2.6.1). drop discovered and reported this Content Injection vulnerability in WordPress Tutor LMS Plugin. This could allow a malicious actor to inject their own content into pages and posts of your website. This could also be abused to inject phishing pages into your website. This vulnerability has been fixed in version 2.6.1. Have additional information or questions about this entry? Get in touch.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)