MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that...
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Stylemix | MasterStudy LMS WordPress Plugin |
< 3.7.50 |
3.7.50 |
Original description The description as published by the source.
MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users to import arbitrary WXR XML files by supplying directory traversal sequences in the stm_lms_step parameter passed to the stm_lms_import_sample_data AJAX action, which lacks capability checks and nonce verification. Attackers can traverse the file system to reference a reachable WXR file and have the handler publish its contained posts under their identity, enabling publication of attacker-chosen post type, title, content, and metadata.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web disclosure@vulncheck.com
- web disclosure@vulncheck.com
- web disclosure@vulncheck.com
- web nvd.nist.gov
- web github.com