CVE-2026-81338

4.6 Moyenne

Publiée le 23/09/2026 à 08:17 · Modifiée le 23/09/2026 à 20:13 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not properly sanitise and restrict HTML in user-submitted content before storing it and rendering it to other users, allowing users with subscriber-level accounts and above to perform stored HTML injection, such as embedding iframes, that can be leveraged for phishing and content spoofing against other users viewing the content.

Traduire en français

Produits concernés

Unknown MasterStudy LMS WordPress Plugin

Scores CVSS

Version	Score	Source	Vecteur
3.1	4.6 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-345

Références

https://wpscan.com/vulnerability/e8494c71-fb0f-4ab9-a8b7-8db3745a2d9b/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories