Masteriyo LMS vulnerabilities
12 vulnerabilities
Known vulnerabilities in Masteriyo LMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54699masteriyomasteriyo - lms+1
EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Stored XSS.This issue affects Masteriyo - LMS: from n/a through <= 1.18.3.CVE-2025-64270masteriyomasteriyo - lms+1EPSS score0.32%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in masteriyo Masteriyo - LMS learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects Masteriyo - LMS: from n/a through <= 2.0.3.CVE-2024-43159masteriyomasteriyo+2EPSS score0.42%
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.6.CVE-2024-43158masteriyomasteriyo+2EPSS score0.52%
Missing Authorization vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.CVE-2024-43239masteriyomasteriyo+2EPSS score0.29%
Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.11.4.CVE-2024-24882masteriyomasteriyo - lms+2EPSS score2.09%
Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.CVE-2024-33939masteriyomasteriyo - lms+2EPSS score0.94%
Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.CVE-2026-73996masteriyomasteriyo - lms+1EPSS score0.52%
Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.CVE-2026-59513masteriyomasteriyo - lms+1EPSS score0.22%
Subscriber Cross Site Scripting (XSS) in Masteriyo - LMS <= 2.3.0 versions.CVE-2026-65463masteriyomasteriyo - lms+1EPSS score0.29%
Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.CVE-2026-62132masteriyomasteriyo - lms+1EPSS score0.29%
Subscriber Broken Access Control in Masteriyo - LMS <= 3.4.0 versions.CVE-2026-62107masteriyomasteriyo - lms+1EPSS score0.52%
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.