This vulnerability in LambertGroup - AllInOne - Content Slider involves improper neutralization of special elements in SQL commands, enabling blind SQL injection. It affects all versions up to and including 3.8. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or remediation details are provided in the available data.

An attacker with low privileges can exploit this vulnerability remotely to perform blind SQL injection, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact). Integrity is not impacted, and availability impact is low. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the vulnerable component and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable service to untrusted networks.