CVE-2023-0236

MEDIUMNuclei

Tutor LMS < 2.0.10 - Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-0236 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 25, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Tutor LMS

Default status: unaffected

CVE ListBefore 2.0.10affected

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress Tutor LMS <2.0.10 - Cross Site ScriptingCVSS 6.1

WordPress Tutor LMS plugin before 2.0.10 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape the reset_key and user_id parameters before outputting then back in attributes. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site, which can allow the attacker to steal cookie-based authentication credentials and launch other attacks. This vulnerability can be used against high-privilege users such as admin.

Impact

Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.

Remediation

Fixed in version 2.0.10.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2023cvexsstutorlmswpscanwordpresswp-pluginauthenticatedthemeumvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/tutor/
FOFA: body=/wp-content/plugins/tutor/
https://wpscan.com/vulnerability/503835db-426d-4b49-85f7-c9a20d6ff5b8 https://nvd.nist.gov/vuln/detail/CVE-2023-0236 https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2