This vulnerability in Stylemix MasterStudy LMS (up to version 3.6.20) exposes sensitive system information to unauthorized users who have limited privileges within the system. The issue allows retrieval of embedded sensitive data without requiring user interaction, potentially leading to information disclosure. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change, with limited confidentiality impact and no impact on integrity or availability.

An attacker with limited privileges can access sensitive system information that should be restricted, potentially aiding further attacks or reconnaissance. The confidentiality impact is limited, and there is no impact on system integrity or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor Stylemix advisories for updates. In the meantime, restrict access to the LMS to trusted users and review permissions to minimize exposure.