This vulnerability, identified as CWE-89, involves improper neutralization of special elements in SQL commands within Community by PeepSo versions up to 9.0.5.2. It enables an attacker with low privileges to perform SQL Injection attacks, which can compromise data confidentiality and cause partial service disruption. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, no user interaction, and scope change with high confidentiality impact and low availability impact. No known exploits are reported in the wild, and no vendor remediation or patch has been published yet.

An attacker with low privileges can exploit this SQL Injection vulnerability to access or manipulate sensitive data, leading to a high confidentiality impact. The vulnerability also causes a low impact on availability, potentially disrupting service partially. Integrity impact is not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users and monitor for suspicious activity related to SQL injection attempts.