This vulnerability involves an SQL injection in the CodeAstro Ingredients Stock Management System 1.0, specifically in the /Ingredients-Stock/stock_manager.php file. The issue arises from improper sanitization of the txt_search_category argument, allowing an attacker to inject malicious SQL commands remotely. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability. No official patch or fix has been disclosed, and the vendor has not provided remediation details.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The impact is rated medium due to limited impact on confidentiality, integrity, and availability as per the CVSS vector. There are no confirmed active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement input validation and sanitization on the txt_search_category parameter to mitigate SQL injection risks. Monitor vendor channels for updates and apply patches promptly once released.