This vulnerability affects code-projects Easy Blog Site 1.0 and involves an SQL injection in the post.php file triggered by manipulating the 'tags' parameter. The vulnerability allows an attacker with low privileges to remotely execute SQL injection attacks without user interaction. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, and low impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available, and the patch status is unknown.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. However, the impact is rated low on confidentiality, integrity, and availability, indicating limited potential damage. The vulnerability is exploitable remotely and does not require user interaction, increasing the risk of attack. No confirmed exploitation in the wild has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the 'tags' parameter in post.php. Restricting database permissions and monitoring for unusual database activity may also help mitigate risk. Avoid exposing vulnerable versions to untrusted networks where possible.