Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2023-4278
Modified
More InfoOfficial Page
Source-contact@wpscan.com
View Known Exploited Vulnerability (KEV) details
Published At-11 Sep, 2023 | 20:15
Updated At-07 Nov, 2023 | 04:22

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Type: Primary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CPE Matches
stylemixthemes
stylemixthemes
>>masterstudy_lms>>Versions before 3.0.18(exclusive)
cpe:2.3:a:stylemixthemes:masterstudy_lms:*:*:*:*:*:wordpress:*:*
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.htmlcontact@wpscan.com
N/A
https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235contact@wpscan.com
Exploit
Third Party Advisory
Hyperlink: http://packetstormsecurity.com/files/175007/WordPress-Masterstudy-LMS-3.0.17-Account-Creation.html
Source: contact@wpscan.com
Resource: N/A
Hyperlink: https://wpscan.com/vulnerability/cb3173ec-9891-4bd8-9d05-24fe805b5235
Source: contact@wpscan.com
Resource:
Exploit
Third Party Advisory
Change History
0Changes found
Details not found