This vulnerability in Aldo Latino PrivateContent (<= 8.11.4) involves improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS 3.1 score of 8.5 indicates a network attack vector with low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (scope: changed), with high confidentiality impact, no integrity impact, and low availability impact. No official patch or remediation level has been published, and no known exploits are reported.

An attacker with low privileges can exploit this SQL Injection vulnerability remotely without user interaction. The primary impact is a high confidentiality breach, potentially exposing sensitive data. There is also a low impact on availability, possibly causing partial denial of service. Integrity is not impacted. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is published, users should monitor Aldo Latino's advisories for updates. Until a patch is available, consider restricting access to the affected PrivateContent plugin and applying compensating controls to limit exposure.