The traveller11 Google Maps Travel Route application up to version 1.3.1 contains an SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This allows an attacker with network access and low privileges to potentially access sensitive data, impacting confidentiality. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation could allow an attacker to read sensitive information from the database, resulting in a high confidentiality impact. The integrity of data is not affected, and availability impact is low. The vulnerability requires low privileges but no user interaction, making it relatively accessible to attackers with network access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected application and monitor for unusual database activity. Avoid exposing the vulnerable application to untrusted networks if possible.