This vulnerability (CVE-2024-54284) in SeedProd Pro involves improper neutralization of special elements used in SQL commands, classified as CWE-89 (SQL Injection). It affects versions through 6.18.10 and allows an attacker with high privileges to exploit the SQL Injection flaw, potentially impacting data confidentiality. The CVSS 3.1 base score is 7.6, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change with high confidentiality impact but no integrity impact and low availability impact. No patch or official remediation level has been published by the vendor yet.

The vulnerability can lead to unauthorized disclosure of sensitive data due to SQL Injection. The CVSS vector indicates that an attacker with high privileges on the network can exploit this vulnerability without user interaction, causing a confidentiality breach. There is no indication of integrity compromise, but availability impact is low. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict access to high-privilege accounts and monitor for unusual database activity related to SeedProd Pro. Avoid exposing the affected plugin to untrusted networks where possible.