PT-2024-4027

Name of the Vulnerable Software and Affected Versions: MasterStudy LMS WordPress Plugin versions up to, and including, 3.2.5 Description: The issue is related to a union-based SQL Injection vulnerability via the user parameter of the "/lms/stm-lms/order/items" REST route. This vulnerability is...