This vulnerability, identified as CWE-89, involves improper neutralization of special elements used in SQL commands within JetSmartFilters by Crocoblock. Jetimpex Inc. It allows unauthenticated attackers to perform SQL Injection attacks on affected versions (up to 3.8.3), enabling them to access sensitive data (confidentiality impact is high) and cause partial denial of service (availability impact is low). The CVSS 3.1 base score is 9.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and scope change. No patch or official remediation level has been published as of the data provided.

Successful exploitation can lead to unauthorized disclosure of sensitive data due to SQL Injection without requiring authentication. The integrity impact is not indicated, but availability impact is low, suggesting possible limited disruption. The vulnerability poses a critical risk to confidentiality and partial availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider applying temporary mitigations such as disabling or restricting access to the vulnerable JetSmartFilters component if feasible. Monitor official Crocoblock advisories for updates and patches.