Stylemix Masterstudy LMS vulnerabilities
14 vulnerabilities
Known vulnerabilities in Stylemix Masterstudy LMS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-54744stylemixmasterstudy lms+1
EPSS score0.23%
Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.6.15.CVE-2025-59576stylemixmasterstudy lms+1EPSS score0.23%
Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.CVE-2025-59575stylemixmasterstudy lms+1EPSS score0.31%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.CVE-2025-59577stylemixmasterstudy lms+1EPSS score0.21%
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Leveraging Race Conditions.This issue affects MasterStudy LMS: from n/a through <= 3.6.20.CVE-2025-64366stylemixmasterstudy lms+1EPSS score0.28%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.6.27.CVE-2025-32237stylemixmasterstudy lms+1EPSS score0.43%
Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS: from n/a through <= 3.5.28.CVE-2025-32141stylemixmasterstudy lms+1EPSS score0.69%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows PHP Local File Inclusion.This issue affects MasterStudy LMS: from n/a through <= 3.5.28.CVE-2024-37093stylemixmasterstudy lms+2EPSS score0.21%
Cross-Site Request Forgery (CSRF) vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Cross Site Request Forgery.This issue affects MasterStudy LMS: from n/a through <= 3.2.1.CVE-2026-73404stylemixmasterstudy lms+1EPSS score0.34%
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.41 versions.CVE-2026-68568stylemixmasterstudy lms+1EPSS score0.26%
Subscriber Privilege Escalation in MasterStudy LMS <= 3.7.41 versions.CVE-2026-42730stylemixmasterstudy lms+1EPSS score0.36%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Blind SQL Injection.This issue affects MasterStudy LMS: from n/a through <= 3.7.29.CVE-2026-57640stylemixmasterstudy lms+1EPSS score0.25%
Subscriber Broken Access Control in MasterStudy LMS <= 3.7.30 versions.CVE-2026-57330stylemixmasterstudy lms+1EPSS score0.22%
Subscriber Cross Site Scripting (XSS) in MasterStudy LMS <= 3.7.27 versions.CVE-2026-78284stylemixmasterstudy lms+1EPSS score0.53%
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.