CVE-2026-82847: The Masteriyo LMS WordPress plugin before 3.4.1 does not sanitise and escape one of its course fields before outputting

The Masteriyo LMS WordPress plugin before version 3.4.1 has a security flaw where it fails to sanitize and escape (clean and safely format) user input in a course field before displaying it back in the editor. This allows instructors to inject malicious scripts (stored XSS, or persistent code that targets other users) that can affect administrators and other high-privilege users.