This vulnerability in QuanticaLabs GymBase Theme Classes (<= 1.4) involves improper neutralization of special elements used in SQL commands, resulting in SQL Injection. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No known exploits in the wild or patch information is currently available.

Successful exploitation could allow an attacker to access sensitive data within the database due to high confidentiality impact. The vulnerability does not impact data integrity but may cause limited availability issues. The attack can be performed remotely with low complexity and requires only low privileges, increasing the risk profile.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected components and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable theme classes to untrusted users.