WordPress Plugin Vulnerabilities

Tutor LMS < 1.9.12 - Reflected Cross-Site Scripting

Description

The plugin does not escape the search parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

Proof of Concept

Affects Plugins

Plugin icon
tutor
Fixed in 1.9.12

References

CVE
CVE-2021-25017
URL
https://plugins.trac.wordpress.org/changeset/2643821

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
7.5 (high)

Miscellaneous

Original Researcher
Krzysztof Zając
Submitter
Krzysztof Zając
Submitter website
https://kazet.cc/
Verified
Yes
WPVDB ID
2d0c4872-a341-4974-926c-10b094a5d13c

Timeline

Publicly Published
2021-12-27 (about 3 years ago)
Added
2021-12-27 (about 3 years ago)
Last Updated
2022-04-09 (about 3 years ago)

Other

Published
Title
Published
2025-04-16
Title
Checkout Files Upload for WooCommerce < 2.2.1 - Contributor+ Stored XSS
Published
2024-08-28
Title
Ninja Forms < 3.8.12 - Administrator+ Stored Cross-Site Scripting
Published
2016-04-12
Title
S3 Video Plugin <= 0.983 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Published
2023-05-11
Title
eBecas <= 3.1.3 - Admin+ Stored XSS
Published
2025-04-07
Title
5sterrenspecialist < 1.5 - Reflected Cross-Site Scripting