CVE-2024-51818 is an SQL Injection vulnerability in the radykal Fancy Product Designer plugin (versions up to 6.4.3). The issue arises from improper neutralization of special elements in SQL commands, allowing remote attackers to execute unauthorized SQL queries. The vulnerability has a CVSS 3.1 score of 9.3, reflecting critical severity with network attack vector, no privileges required, and significant confidentiality impact. No patch or remediation details are currently provided.

Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the affected system, potentially leading to unauthorized disclosure of sensitive data and partial denial of service. The vulnerability impacts confidentiality (high) and availability (low), but does not affect integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin and monitoring for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable component to untrusted networks if possible.