Threats tagged 'ghsa-5m5m-xm33-gpq9'

LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress versions up to and including 10.2.1 contains a PHP Object Injection vulnerability via deserialization of untrusted input. This vulnerability requires authenticated users with edit_course capability roles, such as Instructor or Administrator, and is exploitable during lesson creation when a temporary lesson ID triggers a custom metadata path. Exploitation depends on the presence of a PHP Object Injection POP chain in other installed plugins or themes. Without such a POP chain, the vulnerability has no impact. If a POP chain is present, attackers may delete files, retrieve sensitive data, or execute code.