OSSN (Open Source Social Network) version 8.6 contains a SQL Injection vulnerability in the /action/rtcomments/status endpoint via the timestamp parameter. This vulnerability allows an unauthenticated attacker to inject SQL commands, potentially leading to limited confidentiality and integrity impacts. The vulnerability has a CVSS v3.1 base score of 6.5, indicating a medium severity level. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.