CVE-2026-52470

Crocus v1.3.44 contains an SQL injection vulnerability that allows a remote attacker to escalate privileges via the RecordStateMapper.xml file. Affected component appears to be the web-facing handling of SQL via the RecordStateMapper.xml, with the precise root cause not detailed in the provided d...