This vulnerability in RJ Quickcharts (versions up to 0.6.1) involves improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 8.5, indicating high severity with network attack vector, low attack complexity, requiring low privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker with low privileges to execute crafted SQL commands that may expose sensitive data (confidentiality impact) and cause limited denial of service (availability impact). Integrity is not affected. No known exploits are currently reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the application to untrusted networks if possible.