Lucene search

K
cvelistWPScanCVELIST:CVE-2024-5973
HistoryJul 22, 2024 - 6:00 a.m.

CVE-2024-5973 MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor

2024-07-2206:00:05
WPScan
www.cve.org
3
cve-2024-5973
masterstudy lms
privilege escalation
wordpress plugin

EPSS

0.001

Percentile

19.8%

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn’t have.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "MasterStudy LMS WordPress Plugin ",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "3.3.24"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

EPSS

0.001

Percentile

19.8%

Related for CVELIST:CVE-2024-5973