This vulnerability in Fetch Designs Sign-up Sheets (<= 2.3.0.1) involves improper control of code generation, resulting in a code injection flaw. The issue arises from insufficient validation or control mechanisms when generating code within the sign-up sheets feature, potentially allowing an attacker to inject malicious code. The CVSS score is 6.5 (medium severity) with network attack vector, low complexity, no privileges required, no user interaction, and impacts confidentiality and integrity to a limited extent. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could allow an attacker to inject code remotely without authentication or user interaction, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact or known exploitation in the wild. The medium severity rating reflects the moderate risk posed by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected application and applying general input validation controls if possible.