CVE-2025-30604 describes an SQL Injection vulnerability in the JiangQie Official Website Mini Program (versions up to 1.8.2). The vulnerability arises from improper neutralization of special elements used in SQL commands, allowing an attacker with high privileges to perform Blind SQL Injection. The CVSS 3.1 base score is 7.6 (High), with attack vector network, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No patch or official fix information is provided in the available data.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information due to Blind SQL Injection. The confidentiality impact is high, meaning attackers could extract data from the backend database. Integrity is not impacted, and availability impact is low. Exploitation requires high privileges, which limits the attack surface. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor for vendor updates. Until a fix is available, restrict access to high-privilege accounts and review application input handling for SQL commands to mitigate risk.