An SQL Injection vulnerability exists in Alejandro Alex Reservations (alex-reservations) affecting versions up to 2.4.8. This flaw allows an attacker to inject malicious SQL commands due to improper neutralization of special elements in SQL queries. The vulnerability has a high severity score of 9.3 and can lead to significant confidentiality and availability impacts.