This vulnerability in Themeisle Masteriyo LMS PRO (up to version 2.20.0) is classified as CWE-266 (Incorrect Privilege Assignment). It allows an attacker to escalate privileges due to improper assignment of access rights within the application. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to gain elevated privileges within the Masteriyo LMS PRO system, potentially leading to full system compromise, data disclosure, modification, or denial of service. The high CVSS score indicates critical impact on all security aspects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected Masteriyo LMS PRO installations and monitor for suspicious activity related to privilege escalation attempts. Avoid deploying affected versions in sensitive environments if possible.