This vulnerability affects projectworlds Online Art Gallery Shop Project 1.0. It arises from improper sanitization of the social_insta parameter in the /admin/adminHome.php file, allowing an attacker with low privileges to perform SQL injection remotely without user interaction. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, and no user interaction. The vulnerability could potentially allow partial impact on confidentiality, integrity, and availability of the affected system. No official fix or patch has been published as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The impact is rated medium due to limited privileges required and partial impact on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been published, users should monitor vendor communications for updates. Until a patch is available, restricting access to the /admin/adminHome.php functionality and validating or sanitizing input parameters such as social_insta may reduce risk.