CVSS 3.1
3.8 lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:NCVE-2021-24242
Low (3.8) in themeum tutor lms. EPSS 0.8% chance of exploitation in the next 30 days.
The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- themeum:tutor_lms