5.3
Medium
CVE-2026-28145 Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating…
Description
Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State. This issue affects MasterStudy LMS: from n/a through 3.7.39.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MasterStudy LMS 3.7 | earliest → 3.7.39 | No fix stated |
Other CVEs of MasterStudy LMS
The 6 CVEs of MasterStudy LMS →
CVE-2026-118092
Missing Authorization vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system…
4.3
Medium
CVE-2026-105079
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes…
6.5
Medium
CVE-2026-40766
Subscriber SQL Injection in MasterStudy LMS <= 3.7.25 versions
8.5
High
CVE-2024-37093
Cross-Site Request Forgery (CSRF) vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system…
4.3
Medium