This vulnerability in TeconceTheme Saasplate Core (<= 1.2.8) involves improper neutralization of special elements in SQL commands, enabling Blind SQL Injection attacks. The CVSS 3.1 base score is 9.3, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is high confidentiality loss and low availability impact. No vendor advisory or patch links are currently available, and the product is not a cloud service.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database (high confidentiality impact). The integrity impact is not indicated, and availability impact is low. Since the attack requires no privileges or user interaction and can be performed remotely, the risk is significant. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying any recommended workarounds from the vendor or restrict access to vulnerable endpoints if possible. Monitor vendor channels for updates regarding patches or mitigations.