Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-5973

MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown MasterStudy LMS WordPress Plugin

Default version status: unaffected

  • 0 to < 3.3.24affected

References