This vulnerability in Nelio AB Testing involves improper neutralization of special elements in SQL commands, enabling blind SQL injection. It affects versions up to 8.2.4. The CVSS 3.1 score is 7.6, indicating a high severity with network attack vector, low attack complexity, requiring high privileges, no user interaction, and a scope change. The impact is high confidentiality loss, no integrity loss, and low availability loss. No patch or official remediation details are provided in the available data.

Successful exploitation could allow an attacker with high privileges to extract sensitive information from the database through blind SQL injection, compromising confidentiality. Integrity is not impacted, and availability impact is low. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege access to the plugin and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable plugin to untrusted users.