This vulnerability (CVE-2025-67519) in Shahjahan Jewel's Ninja Tables plugin arises from improper neutralization of special elements in SQL commands, leading to SQL Injection. It affects versions up to 5.2.3. The CVSS 3.1 score is 7.6 (high), with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No patch or vendor advisory is currently available, and no known exploits have been reported.

An attacker with high privileges could exploit this SQL Injection vulnerability to access sensitive data in the database (high confidentiality impact) and cause limited denial of service (low availability impact). Integrity of data is not impacted according to the CVSS vector. Since exploitation requires high privileges, the risk is somewhat mitigated by access controls. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege access to the Ninja Tables plugin and monitor for unusual database activity. Avoid exposing administrative interfaces to untrusted networks. Follow vendor channels for updates on patches or mitigations.