This vulnerability in Eagle-Themes Eagle Booking (<= 1.3.4.3) involves improper neutralization of special elements used in SQL commands, leading to SQL Injection. The CVSS 3.1 score is 8.5 (high), with an attack vector of network, low attack complexity, requiring low privileges and no user interaction. The impact is a complete confidentiality breach and limited availability impact, with no integrity impact. No official patch or remediation guidance is currently provided by the vendor or authoritative sources.

Successful exploitation could allow an attacker to access sensitive data from the backend database, compromising confidentiality. The vulnerability does not affect data integrity but may cause limited availability issues. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application to trusted users and monitor for suspicious activity related to SQL injection attempts. Avoid exposing the vulnerable versions to untrusted networks.