8.2
High
CVE-2024-37094 Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access…
Description
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MasterStudy LMS: from n/a through 3.2.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MasterStudy LMS 3.2 | earliest → 3.2.12 | No fix stated |
| masterstudy_lms 3.2 | earliest → 3.2.12 | No fix stated |
Other CVEs of MasterStudy LMS
The 6 CVEs of MasterStudy LMS →
CVE-2026-118092
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system…
4.3
Medium
CVE-2026-105079
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes…
6.5
Medium
CVE-2026-28145
Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating…
5.3
Medium
CVE-2026-40766
Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions
8.5
High