This vulnerability in TeconceTheme Electio Core (<= 1.4) arises from improper neutralization of special elements used in SQL commands, enabling Blind SQL Injection attacks. The flaw allows remote attackers with no privileges and no user interaction to potentially extract sensitive information from the database (confidentiality impact) while causing limited disruption to availability. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and scope change. No patch or vendor advisory details are currently available.

Successful exploitation could lead to unauthorized disclosure of sensitive information from the backend database (confidentiality impact). The vulnerability does not directly impact integrity but may cause limited availability issues. Given the critical CVSS score of 9.3, the risk to affected systems is high if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider applying any available workarounds or input validation controls to mitigate SQL injection risks. Monitor vendor channels for updates and patches addressing this vulnerability.