This vulnerability in Themeum Tutor LMS (<= 3.7.4) allows SQL Injection due to improper neutralization of special elements in SQL commands. The CVSS 3.1 score is 7.6, indicating a high severity issue with network attack vector, low attack complexity, requiring high privileges, no user interaction, and impacts confidentiality and availability. The vulnerability could allow an attacker with sufficient privileges to execute unauthorized SQL commands, potentially leading to data disclosure or partial service disruption.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the database and partial disruption of service availability. Integrity impact is not indicated. The attack requires high privileges, limiting the scope of potential attackers. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Themeum's advisories for updates. Until a fix is available, restrict high-privilege access to the Tutor LMS application and database to trusted administrators only.