8.8
High
CVE-2026-118090 Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions
Description
Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MasterStudy LMS 3.7 | earliest → 3.7.55 | No fix stated |
Other CVEs of MasterStudy LMS
The 15 CVEs of MasterStudy LMS →
CVE-2026-78284
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions
8.6
High
CVE-2026-73404
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions
6.5
Medium
CVE-2026-68568
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions
6.3
Medium
CVE-2026-57330
Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions
6.5
Medium