This vulnerability in Stylemix uListing (<= 2.1.6) involves improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 8.5, indicating high severity with network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change. The impact includes high confidentiality compromise and low availability impact. No official patch or vendor advisory details are provided in the available data.

Successful exploitation could allow an attacker with low privileges to execute unauthorized SQL commands, potentially leading to unauthorized data disclosure (high confidentiality impact) and limited denial of service (low availability impact). Integrity impact is not indicated. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected uListing versions and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable application to untrusted networks if possible.