This vulnerability in PressTigers ZIP Code Based Content Protection (up to version 1.0.0) is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, high confidentiality impact, no integrity impact, and low availability impact. This means an attacker with high privileges can exploit this remotely to access sensitive data without affecting data integrity but with some impact on availability.

Successful exploitation could allow an attacker with high privileges to execute unauthorized SQL commands, potentially exposing sensitive information from the database. The confidentiality impact is high, but integrity impact is none and availability impact is low. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict high-privilege access to the affected product and monitor for suspicious activity related to SQL injection attempts.