The Saksh Escrow System by susheelhbti contains an SQL Injection vulnerability (CVE-2024-55984) due to improper neutralization of special elements in SQL commands. This flaw affects all versions up to 2.4 and allows an attacker with low privileges and no user interaction to execute network-based attacks that can compromise confidentiality and availability of the system. The CVSS 3.1 base score is 8.5, indicating high severity with attack vector network, low attack complexity, and no user interaction required.

Successful exploitation could lead to unauthorized disclosure of sensitive information (confidentiality impact is high) and partial disruption of service (availability impact is low). Integrity is not impacted according to the CVSS vector. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system to trusted users and networks only. Monitor for unusual database activity that could indicate exploitation attempts.