CVE-2025-25582: Improper Neutralization of Special Elements used in an SQL Command

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...