OpenPanel SQL injection vulnerability

Versions of OpenPanel prior to 3.0.0 contain an SQL injection vulnerability. This vulnerability arises when unescaped profile filter names are inserted into JOIN subqueries. As a result, authenticated users can exploit specially crafted filter names containing trailing comments to bypass the...