The vulnerability CVE-2025-23780 affects Alpha BPO Easy Code Snippets (<= 1.0.2) and involves improper neutralization of special elements in SQL commands, resulting in an SQL Injection flaw. The CVSS 3.1 base score is 7.6, indicating high severity, with network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. The vulnerability allows an attacker with high privileges to execute crafted SQL commands that could expose sensitive data or cause partial service disruption. No vendor patch or advisory is currently available, and no known exploits have been reported.

An attacker with high privileges can exploit this SQL Injection vulnerability to access or disclose sensitive information, affecting confidentiality. The vulnerability does not impact data integrity but may cause limited availability issues. Since the attack requires high privileges, the risk is somewhat constrained to users with elevated access. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and monitor for suspicious activity related to SQL commands. Avoid exposing the vulnerable versions in untrusted environments.