This vulnerability in TeconceTheme Nestbyte Core (<= 1.2) arises from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. An attacker can exploit this flaw remotely without authentication (AV:N/AC:L/PR:N/UI:N) to potentially extract sensitive data (C:H), though it does not impact integrity and only causes low availability impact. The vulnerability is classified as critical with a CVSS 3.1 base score of 9.3.

Successful exploitation could allow an unauthenticated remote attacker to perform Blind SQL Injection, potentially leading to unauthorized disclosure of sensitive information. The vulnerability does not affect data integrity but may cause limited availability impact. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider restricting access to the affected application and monitor for unusual database activity. Avoid exposing the vulnerable component to untrusted networks if possible.