This vulnerability in ameliabooking Amelia allows improper neutralization of special elements in SQL commands, resulting in a blind SQL injection vulnerability. It affects versions up to 2.1.1. The CVSS 3.1 score is 7.6, indicating a high severity with network attack vector, low attack complexity, high privileges required, no user interaction, and a scope change. The impact includes high confidentiality loss and low availability impact. No official fix or patch has been documented in the provided data.

An attacker with high privileges can exploit this blind SQL injection vulnerability to extract sensitive information from the database, compromising confidentiality. The vulnerability also causes a low impact on availability. There is no indication of integrity impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict high-privilege access to the affected Amelia plugin and monitor for unusual database activity. Avoid exposing the vulnerable service to untrusted networks. Follow vendor updates closely for official fixes.