This vulnerability in uxper Uxper Booking (versions <= 1.3.3) is caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. The CVSS 3.1 score is 8.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, high confidentiality impact, no integrity impact, and low availability impact. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation can lead to unauthorized disclosure of sensitive information due to blind SQL injection. The integrity of data is not impacted, but availability may be slightly affected. The vulnerability requires low privileges and no user interaction, increasing the risk of exploitation. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable versions to untrusted networks.