This vulnerability involves improper neutralization of special elements in SQL commands within the Stylemix MasterStudy LMS plugin, enabling Blind SQL Injection attacks. It affects all versions up to 3.6.27. The CVSS 3.1 base score is 7.6, indicating high severity with network attack vector, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No known exploits are reported in the wild, and no vendor patch or advisory details are available at this time.

An attacker with high privileges can exploit this vulnerability remotely to perform Blind SQL Injection, potentially extracting sensitive information from the database. The vulnerability does not affect data integrity but may cause limited denial of service conditions. There are no known active exploits in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access to the affected system and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable plugin to untrusted networks or users with elevated privileges.