GG Soft Software Services Inc. Paperwork contains an improper neutralization of special elements within an SQL command, leading to a SQL injection flaw. This weakness permits an attacker to alter database queries, potentially exposing, modifying, or deleting data stored in the application. The impact is primarily on data confidentiality and integrity, as unauthorized reads or writes to the database can be performed without authentication if the vulnerability is exploitable from a network or user‑facade interface.

All installed instances of GG Soft Software Services Inc. Paperwork with release dates up to September 9 2026 remain vulnerable. No specific version numbers are listed, but any build prior to that date is at risk.

The CVSS score of 7.1 indicates a high severity for this flaw, while the EPSS score is currently unavailable. The citation indicates the vulnerability is not yet listed in CISA’s KEV catalog. The likely attack vector is through the application’s input fields or web forms that construct SQL statements, suggesting the flaw may be reachable remotely over network traffic. Exploitation would succeed without additional credentials if attacker‑supplied data is directly incorporated into SQL statements.