This vulnerability involves improper neutralization of special elements in SQL commands within Metagauss ProfileGrid, enabling Blind SQL Injection attacks. The affected versions include all up to and including 5.9.5.3. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality impact and low availability impact. No known exploits in the wild or vendor patch information are currently available.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to perform Blind SQL Injection, potentially exposing sensitive data (high confidentiality impact). The integrity impact is not indicated, and availability impact is low. This could lead to unauthorized data disclosure from the ProfileGrid application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected application and monitoring for suspicious activity related to SQL injection attempts.