This vulnerability affects itsourcecode Content Management System 1.0 and involves SQL injection via the topic_id argument in the /admin/add_sub_topic.php file. The flaw allows remote attackers to manipulate SQL queries, potentially compromising the database. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability has been publicly disclosed with an available exploit, but no vendor fix or mitigation details are currently known.

Successful exploitation of this SQL injection vulnerability could allow attackers to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The medium CVSS score reflects limited impact due to low privileges required but low scope and impact on confidentiality, integrity, and availability. No confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the /admin/add_sub_topic.php endpoint and validate or sanitize inputs to the topic_id parameter as a temporary mitigation.