The vulnerability CVE-2025-30590 affects the Dourou Flickr set slideshows plugin (versions up to 0.9) and is caused by improper neutralization of special elements in SQL commands, resulting in SQL Injection. The CVSS score is 8.5, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact includes high confidentiality loss and low availability impact. There is no vendor advisory or patch link available, and no known exploits in the wild have been reported.

An attacker with low privileges can exploit this SQL Injection vulnerability remotely to compromise the confidentiality of the affected system's data. The integrity impact is not indicated, and availability impact is low. This could allow unauthorized access to sensitive information stored in the database. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected plugin and monitor for updates from the vendor. Avoid exposing the vulnerable functionality to untrusted users.