mirror of
https://github.com/0xMarcio/cve.git
synced 2026-06-01 06:51:35 +02:00
891 B
891 B
CVE-2021-24873
Description
The Tutor LMS WordPress plugin before 1.9.11 does not sanitise and escape user input before outputting back in attributes in the Student Registration page, leading to a Reflected Cross-Site Scripting issue
POC
Reference
- https://wpscan.com/vulnerability/19980b57-1954-4a29-b2c2-43eadf758ed3
- https://wpscan.com/vulnerability/19980b57-1954-4a29-b2c2-43eadf758ed3
Github
No PoCs found on GitHub currently.