This vulnerability allows remote attackers to perform SQL injection attacks by manipulating the social_linked parameter in the /admin/adminHome.php file of projectworlds Online Art Gallery Shop 1.0. The flaw enables unauthorized database queries that could lead to data leakage or modification. The CVSS 4.0 base score is 6.9, indicating medium severity with network attack vector, low complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. No official fix or patch has been published, and the vendor has not provided remediation details.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database remotely, potentially leading to unauthorized data access or modification. The impact is rated medium based on CVSS 4.0 scoring, reflecting limited but meaningful confidentiality, integrity, and availability impacts. There are no confirmed active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to apply web application firewalls or input validation controls to block or sanitize the social_linked parameter. Monitor vendor channels for updates and patches.