CVE-2026-28145 is an insufficient verification of data authenticity vulnerability in StylemixThemes MasterStudy LMS, affecting versions up to 3.7.39. This weakness enables attackers to manipulate user state, potentially altering application behavior or user privileges. The vulnerability is classified under CWE-345 (Insufficient Verification of Data Authenticity). The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with a moderate impact on integrity and no impact on confidentiality or availability.

The vulnerability allows an attacker to manipulate user state, which can lead to unauthorized changes in the application's behavior or user privileges. There is no direct impact on confidentiality or availability reported. The integrity of user-related data or state is compromised, which may affect trustworthiness of the system's operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is currently available. Users should monitor vendor communications for updates and apply any official patches once released.