This vulnerability in WebbyTemplate Office Locator (<= 1.3.0) allows an attacker to perform SQL Injection due to improper neutralization of special elements in SQL commands. The vulnerability can be exploited remotely without authentication or user interaction, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact). The attack complexity is low, and the vulnerability affects the security scope beyond the vulnerable component. No official patch or remediation details are currently provided.

Successful exploitation could allow an attacker to extract sensitive information from the database, compromising confidentiality. The vulnerability does not impact data integrity but may cause limited availability disruption. No known exploits are reported in the wild as of the published date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation and parameterized queries as temporary mitigations to reduce risk.