CVE-2024-5973

MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

Critical · published July 22, 2024

CVSS v3.1
9.1
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00493 · 41.4th percentile
Published
2024-07-22T06:00Z
EPSS history
Timeline
  • 22 JUL 06:00Z
    MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
    cvelistv5