WizLearn LMS Authentication Bypass Vulnerability

An authentication bypass vulnerability has been found in WizLearn Technologies' Learning Management System (LMS).

An unauthenticated remote attacker could exploit this flaw by sending a specially crafted POST request, bypassing both password authentication and the OAuth authentication flow.

This could result in:

• Unauthorised access to user accounts
• Full administrative control of the LMS platform