This vulnerability in Metagauss ProfileGrid (profilegrid-user-profiles-groups-and-communities) allows SQL Injection due to improper neutralization of special elements used in SQL commands. It affects all versions up to 5.9.5.2. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact.

Successful exploitation could allow an attacker with low privileges to execute crafted SQL commands, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and partial denial of service (low availability impact). Integrity is not impacted according to the CVSS vector. The scope is changed, indicating the vulnerability affects resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected ProfileGrid installations to trusted users only and monitor for unusual database activity related to SQL injection attempts.