This vulnerability in Zoho CRM Lead Magnet allows SQL Injection due to improper neutralization of special elements in SQL commands. It affects versions up to 1.7.9.7. The CVSS 3.1 score is 8.5, indicating high severity, with an attack vector over the network, low attack complexity, requiring low privileges and no user interaction. The impact is a confidentiality breach and partial availability loss. No patch or official remediation information is currently provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with low privileges to inject SQL commands, potentially leading to unauthorized disclosure of sensitive information (confidentiality impact) and partial denial of service (availability impact). Integrity impact is not indicated. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is available, users should monitor vendor communications for updates. No specific mitigations can be recommended beyond awaiting an official fix.