GHSA-w23g-3684-c4x8: Path traversal vulnerability in MasterStudy LMS
The MasterStudy LMS WordPress plugin before version 3.7.50 contains a path traversal vulnerability. Authenticated Subscriber-level users can import arbitrary WXR XML files and publish their contents under their own identity.
CERT24