This vulnerability (CVE-2024-31116) is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands, commonly known as SQL Injection. It affects 10Web Map Builder for Google Maps versions up to 1.0.74. The CVSS v3.1 score is 7.6 (high), with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact affects confidentiality (high) and availability (low), with no integrity impact. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker with high privileges to execute crafted SQL commands that may lead to unauthorized disclosure of sensitive information (confidentiality impact) and partial denial of service (availability impact). Integrity is not impacted according to the CVSS vector. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should limit high-privilege access to the affected product and monitor for unusual activity. No official fix or temporary workaround has been published by the vendor at this time.