nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-35090 CVE-2023-35090
MEDIUM
WordPress MasterStudy LMS Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)
Record summary
CVE-2023-35090 has a selected CVSS score of 6.5 (medium).
Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.7 versions.
Description source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
MasterStudy LMS WordPress Plugin – for Online Courses and EducationBrowse StylemixThemes / MasterStudy LMS WordPress Plugin – for Online Courses and Educationmasterstudy-lms-learning-management-systemDefault status: unaffected | CVE List | Through 3.0.7 | affected |
References
2patchstack.comvdb entry
https://patchstack.com/database/vulnerability/masterstudy-lms-learning-management-system/wordpress-masterstudy-lms-plugin-3-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve