Ilinor

**Name of the Vulnerable Software and Affected Versions** Masteriyo LMS – LMS Course Builder, Quizzes & Certificates versions prior to 2.2.2 **Description** An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows authenticated attackers with student-level access or higher to modify the post content (description) of arbitrary course announcements created by instructors or administrators. **Recommendations** Update Masteriyo LMS – LMS Course Builder, Quizzes & Certificates to version 2.2.2 or later.