PT-2022-20347

Name of the Vulnerable Software and Affected Versions Wedding Management System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the /Wedding-Management/admin/client edit.php API endpoint, specifically through the user id variable. Recommendations...