CVE-2026-59513

Masteriyo - LMS versions up to 2.3.0 are vulnerable to a Subscriber Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially leading to unauthorized actions or data exposure for users interacting with the affected application. Organizations using this LMS should prioritize remediation to protect their users from potential exploitation.