This vulnerability in xenioushk BWL Pro Voting Manager (<= 1.4.9) is caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection. An attacker with network access and low privileges can exploit this to extract sensitive data from the database, impacting confidentiality. The CVSS 3.1 score is 8.5, reflecting high severity with network attack vector, low attack complexity, no user interaction, and scope change. There is no available patch or vendor advisory information at this time.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the backend database (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited disruption (low availability impact). There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users only and monitor for unusual database queries indicative of SQL injection attempts.