Subscriber PHP Object Injection in MasterStudy LMS <= 3.7.55 versions.

What to know

What it is

A high-severity vulnerability (CVSS 8.8) exists in MasterStudy LMS versions <= 3.7.55 due to Subscriber PHP Object Injection, allowing an attacker to potentially gain high-level access and perform various malicious actions.

Affected

{'products': ['MasterStudy LMS'], 'packages': [], 'versions': ['<= 3.7.55']}

Fix

Check the linked advisory for the concrete fix, as it is not provided in this record.

Exploitation

No known exploitation