2 matches found
CVE-2026-82846
The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, allowing users with a course-author role to perform Stored Cross-Site Scripting attacks that run in the session of anyone viewing the cours...
6.8CVSS0.00431EPSS
SaveExploits0References1
CVE-2026-82846: Improper Neutralization of Input During Web Page Generation
The Masteriyo LMS WordPress plugin before 3.4.0 does not sanitise and escape some course settings before outputting them in a page available to all visitors, allowing users with a course-author role to perform Stored Cross-Site Scripting attacks that run in the session of anyone viewing the cours...
6.8CVSS5.8AI score0.00431EPSS
SaveExploits0References2
20