This vulnerability in Essekia Tablesome (<= 1.2.3) is due to improper neutralization of special elements in SQL commands, enabling blind SQL injection attacks. An attacker with network access and low privileges can exploit this to extract sensitive data from the database, affecting confidentiality. The CVSS 3.1 base score is 8.5, reflecting high severity with network attack vector, low attack complexity, no user interaction, and partial impact on availability.

Successful exploitation can lead to unauthorized disclosure of sensitive information from the database (high confidentiality impact). Integrity is not impacted, and availability impact is low. The vulnerability requires low privileges but no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity related to SQL injection attempts.