CVE-2017-14843

CVE-2017-14843 describes a high-severity SQL Injection vulnerability in the Mojoomla School Management System plugin for WordPress, specifically affecting the dasinfomedia school_management_system product. This flaw allows an authenticated attacker to execute arbitrary SQL commands via the 'id' parameter, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. While there is no evidence of active exploitation or inclusion in CISA's KEV catalog, public exploit code is available on ExploitDB, indicating a clear path for exploitation. Despite its high CVSS score and readily available exploit, the vulnerability has received minimal community discussion or media coverage.