This vulnerability affects the SimpleChatbox_PHP function of the chatbox.sql component in code-projects Simple ChatBox 1.0. It allows remote attackers to perform manipulations that result in the exposure of file and directory information. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality impact. The vulnerability has been publicly disclosed with an exploit available, but no vendor patch or official remediation level has been indicated.

Successful exploitation can lead to unauthorized disclosure of file and directory information on the affected system. This information exposure could aid attackers in further reconnaissance or exploitation activities. There is no indication of privilege escalation, integrity, or availability impact from this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been provided, users should monitor vendor communications for updates. In the meantime, restricting access to the vulnerable endpoint or applying network-level controls to limit exposure may reduce risk.