CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The MasterStudy LMS Pro plugin for WordPress is vulnerable to arbitrary file uploads due to a missing file type validation in the stm_lms_add_assignment_attachment function in all versions up to, and including, 4.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server, which may make remote code execution possible.
Explanation of Vulnerability in Simple Terms
MasterStudy LMS Pro versions up to 4.7.0 allow authenticated users to upload files without proper validation. An attacker with low-level account access can upload malicious files to the server, potentially gaining the ability to run code or modify site content. This affects confidentiality, integrity, and availability of the site.
What an attacker can do
Upload malicious files and run code on the site, or modify/delete site data.
Potential impact on your site
Compromised site integrity, data theft, and potential complete server takeover via file upload.
Conditions required to exploit
Attacker needs a low-privilege user account (e.g., student or instructor role).
Key dates
External resources
Related vulnerabilities
