This vulnerability (CVE-2024-55978) affects WalletStation Code Generator Pro through version 1.2 and involves improper neutralization of special elements in SQL commands, resulting in an SQL Injection flaw. The vulnerability allows remote attackers to execute arbitrary SQL commands without authentication, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact is high confidentiality loss and low availability impact, with no integrity impact reported. No vendor patch or official fix information is available, and the product is not a cloud service, so remediation depends on vendor updates or user mitigation.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive data due to SQL Injection. The CVSS score of 9.3 reflects critical severity with high confidentiality impact, no integrity impact, and low availability impact. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, consider applying any recommended workarounds from the vendor or limiting exposure of the affected application to untrusted networks.