This vulnerability, identified as CWE-89, involves improper neutralization of special elements used in SQL commands (SQL Injection) in the Subscriber component of Visitor Traffic Real Time Statistics Pro. It affects all versions up to 11.10. The CVSS 3.1 score is 8.5, indicating a high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, with scope changed, high confidentiality impact, no integrity impact, and low availability impact. No official patch or remediation guidance is currently available, and no known exploits are reported in the wild.

An attacker with low privileges can exploit this vulnerability remotely without user interaction to inject SQL commands. This can lead to partial denial of service and compromise of confidentiality of the affected system's data. Integrity impact is not indicated, but the confidentiality impact is high. Availability impact is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No temporary or official fixes have been documented at this time.