CVE-2024-5973

T

he MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.

Configurations

Configuration 1 (hide)

cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 09:48

Type Values Removed Values Added
References () https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/ - Exploit, Third Party Advisory () https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/ - Exploit, Third Party Advisory

01 Aug 2024, 14:00

Type Values Removed Values Added
CPE cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:*
First Time Stylemixthemes
Stylemixthemes masterstudy Lms
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
References () https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/ - () https://wpscan.com/vulnerability/59abfb7c-d5ea-45f2-ab9a-4391978e3805/ - Exploit, Third Party Advisory
CWE NVD-CWE-noinfo

22 Jul 2024, 13:00

Type Values Removed Values Added
Summary
  • (es) El complemento de WordPress MasterStudy LMS WordPress Plugin anterior a 3.3.24 no impide que los estudiantes creen cuentas de instructor, que podrían usarse para obtener acceso a funcionalidades que no deberían tener.

22 Jul 2024, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-22 06:15

Updated : 2024-11-21 09:48


NVD link : CVE-2024-5973

Mitre link : CVE-2024-5973

CVE.ORG link : CVE-2024-5973


JSON object : View

Products Affected