CVE-2022-31788

IdeaLMS 2022 contains a SQL injection vulnerability in the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname, enabling an attacker to manipulate queries. CVSS data indicates high/critical impact (C/I/A HIGH in CVSS3.1; base score 9.8). No remediation/version patch details ...