This vulnerability in Stylemix MasterStudy LMS (<= 3.7.29) involves improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality impact and low availability impact. The vulnerability allows an attacker to infer sensitive data from the backend database without direct data disclosure or integrity modification.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to perform blind SQL injection, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact). The integrity of data is not impacted, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected LMS installation to trusted users and monitor for unusual database query patterns. Apply official patches or updates from Stylemix once released.