This vulnerability (CVE-2025-64215) in StylemixThemes MasterStudy LMS Pro is classified as CWE-862 (Missing Authorization). It allows attackers to access functionality that is not properly constrained by access control lists (ACLs). The affected versions are those prior to 4.7.16, although exact affected versions are not explicitly stated in the input data. The CVSS 3.1 base score is 6.5, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L, indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, but integrity and availability impacts are low. No vendor advisory or patch information is provided, and no known exploits have been reported.

The vulnerability allows unauthorized users to perform actions that should be restricted, potentially leading to limited integrity and availability impacts within the affected LMS environment. There is no confidentiality impact reported. The medium CVSS score reflects the potential for attackers to disrupt or alter system functionality without needing privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is provided, users should monitor for vendor updates and apply patches once available. Until then, restricting network access to the affected system and reviewing access control configurations may help reduce exposure.