CVE-2024-2411

Summary

CVE-2024-2411 is a newly discovered vulnerability affecting the MasterStudy LMS plugin for WordPress. This issue, present in all versions up to 3.3.0, allows unauthenticated attackers to leverage a Local File Inclusion flaw through the 'modal' parameter. By exploiting this vulnerability, attackers can include and execute arbitrary files on the server, potentially gaining unauthorized access to sensitive data or achieving code execution. This threat is particularly concerning since it can be exploited even when uploading and including seemingly safe file types, such as images.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.