This vulnerability in keighl Menus Plus+ (<= 1.9.6) is due to improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 8.5, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed, with high confidentiality impact and low availability impact. No official patch or remediation guidance is currently provided in the available data.

Successful exploitation could allow an attacker to execute unauthorized SQL commands, potentially exposing sensitive data (high confidentiality impact) and causing limited denial of service (low availability impact). Integrity impact is not indicated. The vulnerability requires low privileges and no user interaction, making it relatively accessible to attackers with some access to the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable application to untrusted networks if possible.