The School Management System for WordPress plugin is vulnerable to SQL Injection through several parameters across multiple AJAX actions in all versions up to and including 93.2.0. This vulnerability arises from insufficient escaping of user-supplied parameters and inadequate preparation of existing SQL queries. As a result, unauthenticated attackers can append additional SQL queries to extract sensitive information from the database.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2024-12612 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted requests to the affected AJAX endpoints of the plugin, injecting malicious SQL code through the vulnerable parameters. This allows the attacker to manipulate existing SQL queries and potentially retrieve sensitive data from the database without authentication.
Affected Products
- School Management System for WordPress: A plugin that facilitates the management of school-related activities and data.
Mitigation
To mitigate this vulnerability, it is recommended to update the School Management System for WordPress plugin to the latest version where the issue has been addressed. Additionally, implementing proper input validation and prepared statements in SQL queries can help prevent SQL injection attacks.