CVE-2024-1512
Published: 17 February 2024
Summary
CVE-2024-1512 is a critical-severity SQL Injection (CWE-89) vulnerability in Stylemixthemes Masterstudy Lms. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
The MasterStudy LMS WordPress plugin for online courses and education is affected by CVE-2024-1512, a union-based SQL injection vulnerability present in all versions through 3.2.5. The flaw resides in the 'user' parameter of the /lms/stm-lms/order/items REST route, where insufficient escaping of user-supplied input and missing parameterization of the SQL query allow arbitrary query manipulation. The issue is tracked as CWE-89 and carries a CVSS 3.1 score of 9.8.
Unauthenticated attackers reachable over the network can supply crafted input to the vulnerable endpoint and append additional SQL statements to existing queries. Successful exploitation enables extraction of sensitive database contents and may extend to modification or deletion of data, resulting in full compromise of confidentiality, integrity, and availability without any authentication or user interaction.
Public references include a WordPress plugin repository changeset that implements the fix along with a detailed Wordfence advisory describing the vulnerability and its remediation. Site administrators should update the MasterStudy LMS plugin to the newest release that contains the corrected StmStatistics.php file.
The associated EPSS score remains elevated, with a current value of 0.9311 and a peak of 0.9382.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-17260
Vulnerability details
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to…
more
insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.