Taocms SQL Injection Vulnerability (CNVD-2022-53257)

Taocms is a micro Cms (content management system) in China. version 3.0.2 of Taocms is vulnerable to SQL injection. The vulnerability stems from the application’s lack of validation of externally entered SQL statements. An attacker could exploit the vulnerability to perform SQL injection via the feature editing category.