This vulnerability in Essekia Tablesome (<= 1.2.3) is due to improper neutralization of special elements in SQL commands, enabling blind SQL injection. An attacker with network access and low privileges can exploit this to extract sensitive information from the database, impacting confidentiality. The CVSS 3.1 base score is 8.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and a scope change with high confidentiality impact and low availability impact.

Successful exploitation can lead to unauthorized disclosure of sensitive data from the database (high confidentiality impact) and minor disruption of availability (low impact). Integrity is not impacted. The vulnerability requires low privileges but no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict network access to the affected application and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable version publicly.