This vulnerability in rtowebsites DynamicTags (<= 1.4.0) is due to improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or vendor advisory information is currently provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with low privileges to extract sensitive information from the database (high confidentiality impact) without affecting data integrity but with some limited impact on availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected DynamicTags component to trusted users only and consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts specific to this product.