This vulnerability in Bob Watu Quiz allows an attacker with high privileges to exploit improper neutralization of special elements in SQL commands, resulting in SQL Injection. The affected versions are up to 3.4.3. The CVSS vector indicates the attack requires network access, low attack complexity, and high privileges, with no user interaction needed. The impact is primarily on confidentiality, with potential limited availability impact. No official patch or remediation details are available in the provided data.

Successful exploitation could allow an attacker with high privileges to execute unauthorized SQL commands, potentially leading to disclosure of sensitive information (high confidentiality impact). There is no reported impact on data integrity, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for suspicious activity related to SQL queries. Avoid exposing the vulnerable component to untrusted networks.