This vulnerability (CVE-2026-81800) is an instance of CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in the product Verified Reviews (Avis Vérifiés) by Par avisverifies. It affects all versions up to and including 2.4.6. The vulnerability is exploitable remotely without authentication, with a CVSS 3.1 base score of 9.3, indicating critical severity. The attack vector is network-based with low attack complexity and no privileges or user interaction required. The impact includes high confidentiality loss and low availability impact, with no integrity impact. No vendor advisory or patch information is currently available.

An unauthenticated attacker can exploit this SQL Injection vulnerability to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized disclosure of sensitive data (high confidentiality impact). The vulnerability does not affect data integrity but may cause limited denial of service (low availability impact). The critical CVSS score reflects the high risk posed by this flaw.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious activity. Avoid exposing the vulnerable service to untrusted networks if possible.