CVE-2022-37199: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinalcms/system/user/list...