This vulnerability (CVE-2024-32132) in Codeboxr Team's CBX Bookmark & Favorite plugin is classified as CWE-89, indicating improper neutralization of special elements used in SQL commands (SQL Injection). It affects versions up to 1.7.20 and has a CVSS 3.1 base score of 7.6, reflecting high severity. The attack vector is network-based with low attack complexity but requires high privileges and no user interaction. The impact scope is changed (scope: changed), with high confidentiality impact and low availability impact, but no integrity impact. No official patch or remediation level has been published yet, and no known exploits have been observed in the wild.

Successful exploitation could allow an attacker with high privileges to execute crafted SQL commands, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity is not impacted according to the CVSS vector. The vulnerability does not require user interaction but does require the attacker to have high privileges on the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level is provided, users should restrict access to the affected plugin to trusted users only and monitor for any updates from Codeboxr Team. Avoid exposing the plugin to untrusted networks until a patch is available.