This vulnerability in Meow Gallery involves improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. It affects all versions up to 5.4.4. The CVSS score is 7.6, indicating a high severity with network attack vector, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact affects confidentiality (high) and availability (low), but not integrity. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation could allow an attacker with high privileges to extract sensitive information from the database (confidentiality impact) and cause limited disruption to availability. Integrity is not impacted. The vulnerability requires network access and high privileges, limiting the attack surface. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users with high privileges and monitor for unusual database activity related to SQL injection attempts.