CVE-2024-5973: MasterStudy LMS < 3.3.24 - Privilege Escalation to Instructor
The MasterStudy LMS WordPress Plugin WordPress plugin before 3.3.24 does not prevent students from creating instructor accounts, which could be used to get access to functionalities they shouldn't have.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5973?
CVE-2024-5973 is classified as a high severity vulnerability due to its potential to allow unauthorized access to instructor functionalities.
How do I fix CVE-2024-5973?
To fix CVE-2024-5973, update the MasterStudy LMS WordPress Plugin to version 3.3.24 or later.
What types of systems are affected by CVE-2024-5973?
CVE-2024-5973 affects the MasterStudy LMS WordPress Plugin versions prior to 3.3.24.
What could an attacker achieve with CVE-2024-5973?
An attacker could create unauthorized instructor accounts, gaining access to restricted functionalities of the plugin.
Is it safe to use the MasterStudy LMS WordPress Plugin on my website after CVE-2024-5973?
Using the MasterStudy LMS WordPress Plugin is safe as long as it is updated to version 3.3.24 or later to mitigate CVE-2024-5973.