This vulnerability in Yamna Khawaja Mailing Group Listserv (wp-mailing-group) versions up to 3.0.4 allows SQL Injection due to improper neutralization of special elements used in SQL commands. The CVSS 3.1 score is 8.5, indicating high severity, with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (S:C), with high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation could allow an attacker to execute SQL commands that may lead to unauthorized disclosure of sensitive information (high confidentiality impact) and cause limited denial of service (low availability impact). Integrity is not impacted. The vulnerability can be exploited remotely over the network with low complexity and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected application and applying any available workarounds recommended by the vendor.