medium6.5
CVE-2026-111407
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affe…
Impact
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n/a through 4.1.2.
Affected products
| Product | Affected versions |
|---|---|
| Tutor LMS: From N/A | through 4.1.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.