This vulnerability in VideoWhisper.com's Broadcast Live Video product allows improper control of code generation, classified as CWE-94 (Code Injection). It affects versions before 7.1.3 and enables an attacker with high privileges to inject malicious code, potentially leading to full compromise of the affected system. The CVSS 3.1 score of 7.2 reflects network attack vector, low attack complexity, required high privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could result in arbitrary code execution with high privileges, leading to complete compromise of the affected system's confidentiality, integrity, and availability. This could allow attackers to execute malicious payloads, manipulate data, or disrupt service. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Restricting access to high-privilege accounts and minimizing exposure of the affected software may reduce risk until a patch is released.