Masteriyo LMS — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Masteriyo LMS, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-82850	Masteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key Disclosure	-	-	2026-09-24
CVE-2026-82849	Masteriyo LMS < 3.4.2 - Subscriber+ Arbitrary User Course Progress Disclosure via IDOR	-	-	2026-09-24
CVE-2026-82851	Masteriyo LMS 1.14.0 - 3.4.0 - Instructor+ Arbitrary Post Disclosure via IDOR	-	-	2026-09-12
CVE-2026-82845	Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection	-	-	2026-09-12
CVE-2026-82847	Masteriyo LMS < 3.4.1 - Instructor+ Stored XSS via Course Highlights	-	-	2026-09-12
CVE-2026-82848	Masteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment Disclosure	-	-	2026-09-09
CVE-2026-82846	Masteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom Fields	-	-	2026-09-05
CVE-2026-19712	Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description	-	-	2026-08-16
CVE-2026-13332	Masteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)	-	-	2026-07-27
CVE-2026-10824	Masteriyo LMS < 2.2.1 - Unauthenticated Course Progress Disclosure and Deletion	-	-	2026-06-25

All 10 known CVE vulnerabilities affecting Masteriyo LMS with full Chinese analysis, references, and POCs where available.