This vulnerability involves improper neutralization of special elements in SQL commands within Stylemix uListing, enabling blind SQL injection. The affected versions include all versions up to 2.2.0. The CVSS score is 7.6, indicating a high severity with network attack vector, low attack complexity, required high privileges, no user interaction, and a scope change. The impact affects confidentiality highly, with no integrity impact and low availability impact. No official patch or vendor advisory is currently available.

An attacker with high privileges can exploit this vulnerability to perform blind SQL injection, potentially extracting sensitive information from the database (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited availability issues. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the affected uListing installations and monitor for unusual database activity related to SQL injection attempts.