SQL Injection Vulnerability Affects Tutor LMS from n/a through 2.7.2

CVE-2024-43282

Summary

An SQL Injection vulnerability exists in Themeum's Tutor LMS plugin, which could allow attackers to manipulate SQL queries executed by the application. This flaw affects Tutor LMS versions prior to 2.7.2, potentially enabling unauthorized access to sensitive data within the database. Exploiting this vulnerability could lead to severe security breaches, including data leakage, data corruption, and complete control over the affected system. Organizations using the Tutor LMS plugin should take immediate action to patch this vulnerability to safeguard their databases and user information.

References