CVE-2025-22930: Improper Neutralization of Special Elements used in an SQL Command

OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the groupid parameter at /messaging/Group.php...