This vulnerability in Contest Gallery (<= 21.3.2) involves improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. An attacker with low privileges can exploit this remotely without user interaction. The CVSS score is 8.5 (high), indicating a significant risk primarily to confidentiality and availability. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation status is unknown.

Successful exploitation could lead to partial denial of service and compromise of confidentiality within the affected Contest Gallery installations. Integrity impact is not indicated. The vulnerability requires low attack complexity and no user interaction, increasing its risk profile. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for unusual activity related to database queries. Avoid exposing the application to untrusted networks if possible.