This vulnerability (CVE-2025-31526) affects eleopard Behance Portfolio Manager (<= 1.7.5) and is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, requiring low privileges but no user interaction, with a scope change and high confidentiality impact. The vulnerability allows an attacker to execute unauthorized SQL queries, potentially exposing sensitive data. No patch or official remediation guidance is currently provided.

Successful exploitation can lead to unauthorized disclosure of sensitive data due to SQL Injection. The vulnerability does not impact data integrity but may cause limited availability issues. The attack requires network access and low privileges but no user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the affected application and monitor for suspicious activity related to SQL queries. Avoid exposing the application to untrusted networks if possible.