4.3Medium

CVE-2024-38701WordPress Academy LMS plugin <= 2.0.4 - Broken Access Control vulnerability

Academy LMS Academy LMS; kodezen academy_lms Published: (2 years ago)

Description

Authorization Bypass Through User-Controlled Key vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 2.0.4.

Weakness (CWE): CWE-639

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Academy LMS Academy LMS ≤ 2.0.4
kodezen academy_lms ≤ 2.0.4

References and patches