This vulnerability involves improper neutralization of special elements in SQL commands within the Hannan گرویتی فرم فارسی (persian-gravity-forms) plugin, allowing blind SQL injection attacks. The affected versions include all releases up to and including 3.0.2. The CVSS 3.1 score is 7.6, indicating high severity, with an attack vector of network, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact includes high confidentiality impact and low availability impact, with no integrity impact. No official fix or patch is currently documented.

An attacker with high privileges can exploit this blind SQL injection vulnerability to extract sensitive data from the database, impacting confidentiality. The vulnerability also causes a low impact on availability, potentially leading to partial denial of service. There is no impact on data integrity. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict high privilege access to the affected plugin and monitor for unusual database activity. Avoid exposing the vulnerable component to untrusted networks where possible.