PT-2026-133766
CVE-2026-118090
·
Published
2026-10-30
·
Updated
2026-10-30
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
MasterStudy LMS versions prior to 3.7.56
Description
An issue exists that allows for PHP Object Injection, a technique where an attacker can manipulate serialized objects to execute arbitrary code or interfere with application logic.
Recommendations
Update MasterStudy LMS to version 3.7.56 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾