The vulnerability CVE-2026-6031 affects Simple IT Discussion Forum 1.0 by allowing SQL injection through the Category argument in the /add-category-function.php file. This enables remote attackers to inject malicious SQL code due to insufficient input validation or sanitization. The vulnerability is remotely exploitable without authentication and has been publicly disclosed. No vendor patch or official remediation has been documented as of the published date.

Successful exploitation of this SQL injection vulnerability could allow attackers to manipulate backend database queries, potentially leading to unauthorized data access, data modification, or disruption of forum functionality. The CVSS score of 6.9 indicates a medium impact with low vector complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying manual input validation or filtering on the Category parameter to mitigate injection risks. Monitoring for unusual database activity related to this parameter is also advisable.