This vulnerability in gopiplus New Simple Gallery (up to version 8.0) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high confidentiality impact and low availability impact. No patch or vendor advisory details are available to confirm remediation status.

An attacker with low privileges can exploit this vulnerability remotely to perform Blind SQL Injection attacks, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact). The integrity impact is not indicated, and availability impact is low. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable version to untrusted networks.