This vulnerability in Eagle-Themes Eagle Booking (<= 1.3.4.3) is caused by improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 8.5, indicating high severity, with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed, with high confidentiality impact and low availability impact. No official patch or mitigation details are provided in the available data.

Successful exploitation could allow an attacker to access sensitive information from the database (high confidentiality impact) and cause a partial denial of service (low availability impact). Integrity impact is not indicated. The vulnerability requires low privileges but no user interaction, making it a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates and apply any official patches once available. Until then, restrict access to the affected application and consider additional controls such as input validation or web application firewalls to mitigate SQL injection risks.