A high severity SQL injection vulnerability in the Visualizer plugin allows authenticated contributors to threaten database integrity.

This vulnerability is classified as a SQL injection issue where improper sanitization of user-supplied data allows for malicious SQL command execution. It is exploitable by authenticated users with contributor roles.

The ability to inject SQL commands can lead to unauthorized access to application data, including sensitive configuration or user information. The CVSS score of 8.5 underscores the need for immediate attention to prevent unauthorized database manipulation.

Immediate Action: Since no specific patch version is explicitly provided in the data, verify the status of the plugin and restrict contributor access until a vendor-supplied security update is confirmed and applied.

Proactive Monitoring: Review web server and database logs for anomalous activity originating from contributor-level sessions.

Compensating Controls: Implement Web Application Firewall rules to block SQL injection attempts, providing a layer of defense while awaiting an official software update.

Public Exploit Available: Unknown

Administrators should monitor the vendor advisory page for a forthcoming patch and apply it immediately upon release. In the interim, limiting access to the plugin settings for non-administrative users is a recommended defensive practice.