This vulnerability in Tiny Solutions Media Library Tools (versions <= 1.6.15) is caused by improper neutralization of special elements in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 7.6 (high), with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact is high confidentiality loss, no integrity impact, and low availability impact. No patch or vendor advisory is currently provided.

An attacker with high privileges on the network could exploit this SQL Injection vulnerability to access or disclose sensitive information from the database, resulting in a high confidentiality impact. Integrity is not affected, and availability impact is low. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict high-privilege access to the affected application and monitor for suspicious activity related to SQL queries.