4.9
Medium
CVE-2025-59575 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS…
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MasterStudy LMS 3.6 | earliest → 3.6.20 | No fix stated |
Other CVEs of MasterStudy LMS
The 15 CVEs of MasterStudy LMS →
CVE-2026-118090
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions
8.8
High
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions
8.6
High
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions
6.5
Medium
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions
6.3
Medium