This vulnerability (CVE-2024-54283) in SeedProd Pro arises from improper neutralization of special elements used in SQL commands, classified under CWE-89 (SQL Injection). It affects versions through 6.18.10 and allows an attacker with high privileges to inject SQL commands, potentially impacting the confidentiality and availability of the database. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact. No official patch or remediation level has been published by the vendor as of now.

Successful exploitation could lead to unauthorized disclosure of sensitive data (high confidentiality impact) and partial disruption of service (low availability impact). Integrity impact is not indicated. The attack requires high privileges, limiting the attacker profile. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege access to the SeedProd Pro plugin and monitor for unusual database activity. Avoid exposing administrative interfaces unnecessarily. Follow vendor channels for updates on patches or mitigations.